Installation

Topic 50653 | Release Notes | Web Security Solutions | Updated 11-Feb-2014


Applies to:	Websense Web Filter, Web Security, Web Security Gateway, and Web Security Gateway Anywhere, v7.8.2

Requirements overview

Most Websense Web Security components can be run on the following operating systems:

Microsoft Windows Server 2008 R2, 2008 R2 SP1, 2012, or 2012 R2


	Important Before installing any components, make sure that .NET Framework 3.5 is installed on the machine.

Red Hat Enterprise Linux 6.x (64-bit)

The following components run on Windows platforms only:

TRITON Unified Security Center

Linking Service

Web Security Log Server

DC Agent

Real-Time Monitor

Websense Content Gateway is a Linux-only component that requires Red Hat Enterprise Linux 6.2, 6.3, 6.4 or 6.5.

In appliance-based deployments, in addition to the Windows-only components, the following components, when used, must be installed off-appliance:

Sync Service

Remote Filtering Server and Client

Note that while the Remote Filtering Client Pack option no longer appears in the installer, the utility used to configure Remote Filtering Client is included automatically on any Windows server that includes Web Security components. See the Remote Filtering Software technical paper for details.

Transparent identification agents (eDirectory Agent, Logon Agent, RADIUS Agent)

To enable Web Security reporting tools, use one of the following certified database engines:

Microsoft SQL Server 2012 Standard, Business Intelligence, or Enterprise

Important

SQL Server 2012 uses a different security model than previous versions. To successfully create the Log Database in SQL Server 2012, you must either:

Install the database in the default SQL Server folder.

Grant the database engine full control over the folder that will host the database before you install Log Server.

Microsoft SQL Server 2008 or 2008 R2 Standard or Enterprise

Microsoft SQL Server 2008 R2 SP2 Express (installed using the TRITON Unified Installer)

Websense Web Security and Web Filter can be integrated with the following third-party firewall, proxy, and caching applications:


Product	Versions
Microsoft Forefront TMG	2008 or later
Cisco ASA	v8.0 or later
Cisco Router	IOS v15 or later
Citrix XenApp	5.0, 6.0, or 6.5

In addition, this release supports integration with Bluecoat ProxySG using the ICAP protocol, via the Websense ICAP Service.

This version does not support integration with Check Point products, Cisco PIX Firewall, nor Cisco Content Engine.

See System requirements for this version in the Deployment and Installation Center for detailed hardware and software requirements.

Installation overview

The number of steps required to install Websense Web Security Solutions depends on the hardware platforms used in your environment, the size of your network, and how widely you plan to deploy components.

As a best practice, for software component installation, log in as a domain and local administrator to run the installer.

At simplest, a software installation requires you to:

Download the TRITON Unified Installer (WebsenseTRITON782Setup.exe).

Run the installer on a robust Windows Server 2008 R2, 2008 R2 SP1, 2012, or 2012 R2 machine.

Select the Websense Web Security All installation option.

All components required for a basic Websense Web Security deployment are installed on the selected machine, including the TRITON Unified Security Center and, if no other Microsoft SQL Server instance is identified in your network, SQL Server 2008 R2 SP2 Express.

A simple appliance deployment requires you to:

Run the firstboot script and configure the full policy source appliance.

Download the TRITON Unified Installer (WebsenseTRITON782Setup.exe).

Run the installer on a Windows Server 2008 R2, 2008 R2 SP1, 2012, or 2012 R2 machine.

Select the TRITON Unified Security Center radio button, and the Web Security check box beneath it.

Installing the TRITON Unified Security Center requires Microsoft SQL Server. If an existing SQL Server instance is not available, SQL Server 2008 R2 SP2 Express is installed.

Run the TRITON Unified Installer again (on the TRITON Management Server or another machine) and select Custom, then Web Security to install off-appliance components that are not part of the TRITON console, like transparent identification agents.

For a typical software deployment, expect to run the TRITON Unified Installer (or the TRITON Unified Installer plus the Web Security Linux Installer) on at least 3 machines:

Use the TRITON Unified Installer or Web Security Linux Installer to perform a Custom installation for core filtering components (Policy Broker, Policy Server, Filtering Service, Network Agent, User Service, Usage Monitor) on a supported Windows or Linux machine.

Use the TRITON Unified Installer to perform a TRITON Unified Security Center > Web Security installation to install core management components and reporting tools on a supported Windows machine.

Installing the TRITON Unified Security Center requires Microsoft SQL Server. If an existing SQL Server instance is not available, SQL Server 2008 R2 SP2 Express is installed.

Use the TRITON Unified Installer to perform a Custom > Web Security installation of Web Security Log Server on a supported Windows machine.

Start-to-finish installation instructions covering most typical deployments are available in PDF format:

Installation Instructions: Web Security Gateway Anywhere

Installation Instructions: Web Security Gateway

Installation Instructions: Web Security or Web Filter

Upgrade overview

To upgrade directly to Websense Web Security Version 7.8.2:

Your current deployment must be at Version 7.6 or later.

All components that you want to upgrade (rather than install separately after core components are upgraded) must be on a supported operating system. This may require:

Reinstalling your existing version of Policy Broker and Policy Server on a platform supported in v7.8.2.

Migrating policy and configuration settings to the new installation on the new platform. (See Migrating Web Security management components.)