Prioritizing Security Risk categorization

Web Security Help | Web Security Solutions | Version 7.8.x

By default, when a site is categorized in a Security Risk category, the site is filtered based on its Security Risk classification, even when the site:

Is added as a recategorized URL in a permitted category

Appears in a limited access filter


	Note Although the Extended Protection categories are default members of the Security Risk class, because they group sites that are still being analyzed, they receive lower prioritization than other categories. As a result, custom categorization always takes precedence over Extended Protection categorization.

When Filtering Service or the hybrid service assigns a site to a Security Risk class category (based on Master Database category or Content Gateway analysis):

If a category filter is in effect, and the security-related category is blocked, the site is blocked.

If a limited access filter is in effect, the site is blocked.

Configure which categories are part of the Security Risk class on the Settings > General > Risk Classes page in the Web Security manager.

If you want to always filter based on custom categorization, regardless of whether a site appears in a Security Risk category (like Malicious Web Sites or Spyware):

Navigate to the Websense bin directory on the Filtering Service machine (C:\Program Files or Program Files (x86)\Websense\Web Security\bin or /opt/Websense/bin/, by default) and open the eimserver.ini file in a text editor.

Navigate to the [FilteringManager] section and add the following line:

SecurityCategoryOverride=OFF

Save and close the file.

Restart Filtering Service.

Windows: Use the Services tool to restart Websense Filtering Service.

Linux: Use the /opt/Websense/WebsenseDaemonControl command to stop and then start Filtering Service.

In Websense Web Security Gateway Anywhere environments, you can also disable this feature for the hybrid service:

Navigate to the Websense bin directory on the Sync Service machine (C:\Program Files or Program Files (x86)\Websense\Web Security\bin or /opt/Websense/bin/, by default) and open the syncservice.ini file in a text editor.

If it does not already exist, add a section called [hybrid], and then add the SecurityCategoryOverride parameter, as shown here:

[hybrid]
SecurityCategoryOverride=false

Save and close the file.

Restart Sync Service.

Windows: Use the Services tool to restart Websense Sync Service.

Linux: Use the /opt/Websense/WebsenseDaemonControl command to stop and then start Sync Service.