Integrating Web Filter & Security with TMG

Deployment and Installation Center | Web Filter & Security | v8.1.x

Websense Web Filter & Security can be integrated with Microsoft® Forefront™ Threat Management Gateway (TMG).

Refer to Installation Instructions: Web Filter &Security as your primary source of installation instructions. Only additional or alternate steps required to enable TMG integration are provided here.

An integration with TMG affects the following Websense components:

Websense ISAPI Filter plug-in: This additional Websense component is installed on the machine running TMG. The ISAPI Filter plug-in configures TMG to communicate with Websense Filtering Service.

Websense Filtering Service: Interacts with TMG and Websense Network Agent to filter Internet requests. Filtering Service either permits the Internet request or sends an appropriate block message to the user.

After the Filtering Service is installed, the ISAPI Filter plug-in must be installed on every TMG machine in your network.

Websense Network Agent: Manages Internet protocols that are not handled by TMG. Network Agent also enables bandwidth-based filtering.

If your environment includes an array of TMG machines, install Websense components on a machine outside the array.

When TMG receives an Internet request from a user, it passes the request to Websense Filtering Service, which determines the category assigned to the URL and checks the policy assigned to the client.

If the site is assigned to a blocked category, the client receives a block page instead of the requested site.

If the site is assigned to a permitted category, Filtering Service notifies TMG that the site is not blocked, and the client is given access to the site.

The following topics discuss the various aspects of integrating with TMG:

Deployment considerations for integration with Forefront TMG

Installing Web Filter & Security to integrate with Forefront TMG

Upgrading Web Filter & Security when integrated with ISA Server or Forefront TMG

Removing the ISAPI Filter Plug-In

Converting to an integration with Forefront TMG

Forefront TMG initial setup

User identification and authentication with Forefront TMG