Technical Library | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Configuration Files > records.config > Connectivity, analysis, and boundary conditions
Connectivity, analysis, and boundary conditions
Help | Content Gateway | Version 7.8.x
 
Configuration Variable
Data Type
Default Value
Description
wtg.config.
subscription_key
STRING
NULL
Holds the Websense Security Gateway or Websense Security Gateway Anywhere subscription key value.
wtg.config.
download_server_ip
STRING
download.
websense.com
Holds the hostname or IP address of the Websense download server.
wtg.config.
download_server_port
INT
80
Holds the port number of the Websense download server.
wtg.config.
policy_server_ip
STRING
 
Holds the IP address of the Websense Policy Server.
wtg.config.
policy_server_port
INT
55806
Holds the port number of the Websense Policy Server.
wtg.config.wse_server_ip
STRING
 
Holds the IP address of the Websense Filtering Service.
wtg.config.
wse_server_port
INT
15868
Holds the port number of the Websense Filtering Service WISP interface.
wtg.config.wse_server_
timeout
INT
5000
Specifies the maximum length of time, in milliseconds, for communication with Filtering Service.
wtg.config.
ssl_bypassed_categories
STRING
NULL
This variable takes a list of category identifiers that will bypass SSL decryption.
Do not change the value of this variable. It is included strictly as a troubleshooting aid.
Use the Web Security Manager to specify categories to bypass SSL decryption.
wtg.config.
ssl_decryption_bypass_
ip_based
INT
0
Specifies that the SSL category bypass process use only the IP address (not the hostname) when performing a category lookup.
0 = disabled
1 = enabled
wtg.config.ssl_fail_open
INT
1
Specifies whether SSL sites are decrypted if Filtering Service becomes unreachable.
0 = disable – causes all SSL sites to be decrypted when Filtering Service is unreachable.
1 = enable – causes all SSL sites not to be decrypted when Filtering Service is unreachable
wtg.config.fail_open
INT
1
Specifies whether Content Gateway will permit or block the request when Websense Web filtering (Filtering Service) is unavailable.
Set to:
*
0 to send a block page
*
1 to permit the request
wtg.config.
fail_open_analytic_scan
 
INT
1
Specifies how Content Gateway behaves should analytic scanning become non-functional.
Set to:
*
0 to block traffic
*
1 to perform a lookup in the URL master database and apply policy
Note: An alarm is raised whenever analytics scanning becomes non-functional.
wtg.config.archive_depth
INT
5
Specifies the maximum depth of analysis performed on archive files.
wtg.config.
max_decompressions
INT
10
Specifies the maximum number of total decompressions to be performed on archive files (per transaction). The value should not exceed 25.
wtg.config.
max_subsamples
INT
10000
Specifies the maximum number of discrete files within an archive file that Content Gateway may decompress and analyze to classify a given transaction.
wtg.config.
zipbomb_action
INT
1
For internal use. Indicates zip bomb analysis status.
Do not change the value of this variable.
wtg.config.
max_mem_allowed
INT
1500
Specifies in megabytes, the maximum amount of memory, which when consumed, causes Content Gateway to perform more extensive memory monitoring.
wtg.config.lowmem_
behavior
INT
0
Enables (1) or disables (0) bypass of scanning, but still filters.
wtg.config.lowmem_
timeout
INT
120
Timeout value (in minutes) for the low-memory management. After that time, resets to "no management".
wtg.config.rdnsclients
INT
0
Enables (1) or disables (0) logging of clients' hostnames in the log records by doing reverse DNS on each.
wtg.config.
ip_ranges_not_to_scan
STRING
10.0.0.0-10.255.255.255,
172.16.0.0-172.31.255.255,
192.168.0.0-192.168.255.255
Specifies internal IP address ranges not to scan. By default, the list is the standard private non-routable IP addresses. Address ranges are hyphenated with each range separated by a comma.
This is especially helpful in explicit proxy deployments in which a PAC file is not used and you want to exclude the standard internal IP addresses from being scanned.
wtg.config.
scan_ip_ranges
INT
1
Enables (1) or disables (0) bypass of the internal IP address ranges specified in wtg.config.
ip_ranges_not_to_scan. See above.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Configuration Files > records.config > Connectivity, analysis, and boundary conditions
Copyright 2016 Forcepoint LLC. All rights reserved.