New in Websense Web Protection Solutions

Topic 51121 | Release Notes | TRITON AP-WEB | 02-Feb-2015

TRITON APX

Investigative Reports: Improved support for scheduling and exporting large reports

Mobile Integration

Both the Administrator Help and Content Gateway Manager Help are available in both English and Japanese.

For the Administrator Help in the TRITON Manager, select a language on the TRITON Settings > My Account page.

For the Content Gateway Manager Help, specify the language on the Configure > My Proxy > UI Setup > General page.

TRITON APX

To address the wide-scale adoption of cloud and mobile technologies, along with a rapid growth in distributed workforces, Websense, Inc., is excited to launch a new, industry-leading security suite — Websense® TRITON® APX 8.0. This new modular platform provides advanced threat and data theft protection for organizations that wish to embrace new technologies and working practices. TRITON® APX provides protection across the entire kill-chain, reveals actionable intelligence, and enables real-time feedback to educate and motivate end users to avoid risky behavior. This product release is the culmination of eighteen months of business transformation and innovation. As a result, Websense customers are now able to maximize the unparalleled protection and ROI of Websense TRITON APX solutions well into the future.

Version 8.0 is the first product release that uses a new, simplified product naming and grouping of the familiar Websense TRITON product line.

Original Name

New Name

Websense TRITON Web Security Gateway

Websense TRITON AP-WEB

Websense TRITON Web Security Gateway Anywhere

Websense TRITON AP-WEB with:

Web Hybrid Module

Web DLP Module

Web Sandbox Module (if purchased)

Previous product functionality remains intact. The user interface has the same familiar look and feel and the core product continues to provide the strong protections you've come to rely on.

In addition to new names, our web protection solutions offer new features and includes product corrections. Refer to the information provided in these Release Notes for additional product information.

Investigative Reports: Improved support for scheduling and exporting large reports

In prior versions, the amount of time to generate a PDF or Excel document in investigative reports could be excessive if:

A scheduled report job produced a large report.

A large report was exported.

Changes have been made to reduce the amount of time it now takes for these processes to complete.

There is also a change to the way some of the variables defined in the wse.ini file (found in C:/Program Files (x86)/Websense/Web Security/webroot/Explorer, by default) are used by scheduled report jobs.

sendMulti, used to divide large, scheduled detail reports into multiple files, now uses the value defined in reportBatchCount to determine how many records to include in each file. Set the sendMulti value to 1 to enable the feature

reportBatchCount, used to determine the number of records included in a scheduled report, can no longer be set to a value greater than 500,000.

The default value is 10,000.

This setting is used when sendMulti is enabled (1).

Any value over 500,000 is ignored and 500,000 is used.

If sendMulti is disabled (0), each scheduled detail report is divided into files containing up to 500,000 records.

Only detail reports use these wse.ini files settings.

To better accommodate emailing the scheduled reports, all reports are sent as a zip file, even when the report is a single file.

For the best performance, a minimum of 4G of RAM is recommended. Companies with large amounts of data should consider increasing to 8G or more.

Mobile Integration

TRITON AP-WEB customers with the Web Hybrid module now have the option to include Websense TRITON AP-MOBILE integrated with AirWatch® Mobile Device Management (MDM).


	Important If you purchase a subscription to TRITON AP MOBILE, at this time you may use TRITON AP MOBILE integrated with AirWatch Mobile Device Management (MDM), which is available on an Early Access as is basis, or TRITON Mobile Security. At the time of purchase, you'll need to indicate which product you wish to use, so that the TRITON Manager (cloud or hybrid) can be set up for that product.

TRITON AP-MOBILE protects your end users' devices from potential data loss and the possible theft of intellectual property, plus from mobile malware, web threats, phishing attacks, spoofing, and more—all of which helps them safely access corporate resources.

When integrated with AirWatch MDM, you can provision iOS and Android mobile devices to send traffic to the Websense cloud service for analysis and policy enforcement. You can also configure and update device settings over the air, create different policies for corporate versus personal devices, and secure mobile devices through actions such as locking and wiping them.

To set up your account, in the Web module of the TRITON Manager, go to the Settings > Hybrid Configuration > Mobile Integration > Mobile Device Management Account Setup page.

Select the checkbox Integrate with MDM provider.

Note that unchecking this box and clicking Save Now disables integration between the Websense solution and AirWatch MDM.

Enter the API URL and API key. You need to obtain these from the AirWatch Console. See Step 4, Log on to the AirWatch Console in the Getting Started Guide.

For the API URL, remove the "/API" from the end of the URL, so for example, change https://orgname.airwlab.com/API to https://orgname.airwlab.com.

Enter the user name and password that you use to log on to your AirWatch administrator account.

Click Save Now.

After you click Save Now, and the settings are confirmed and saved successfully, this page then displays a user name and password that have been automatically generated for your hybrid account, along with a connection URL.

Copy and paste these three items into the VPN connection information section of the AirWatch Console.

For an overview of the mobile integration process, see the Getting Started Guide.

Logon application support

Logon Agent communicates with the logon application (LogonApp) on client machines to identify users as they log onto or off of Windows domains.

The logon application now supports the following operating systems:

Mac OS X 10.10 (64-bit)

Microsoft Windows 8.1 Update 1 (32-bit and 64-bit; Windows 8.1 RT is not supported)

For more information about Logon Agent and the logon application, see the Using Logon Agent for Transparent User Identification white paper.

Third-party platform and product support

All components

This version includes support for:

Internet Explorer 10, standards mode

Internet Explorer 11, standards mode

Mozilla Firefox 32

Google Chrome 38

Note that installing web protection components on Windows Server 2012 or 2012 R2 requires Microsoft .NET Framework v3.5. Install .NET Framework v3.5 before running the TRITON Unified Installer.

Content Gateway

Content Gateway is certified on the following 64-bit platforms:

Red Hat Enterprise Linux 6 series, 64-bit, Basic Server

Kernel version for 6.5: 2.6.32-431


	Note Websense testing encountered a kernel bug in version 2.6.32-431 that can impact performance. However, Content Gateway features were tested on this version of the OS and passed the certification tests.

Kernel version for 6.4: 2.6.32-358

V-Series appliances

Content Gateway is also supported on:

Red Hat Enterprise Linux 6 series, 64-bit, Basic Server

Kernel version for 6.3: 2.6.32-279

The corresponding CentOS versions, including updates 3 and 4 (CentOS version numbers have a one-to-one correspondence with Red Hat Enterprise Linux version numbers)

Visit www.redhat.com for kernel information. To display the kernel version installed on your system, enter the command:

/bin/uname -r

Only kernels listed above are certified or supported.

Websense, Inc. provides "best effort" support for the version of Red Hat Enterprise Linux and CentOS listed above. Under "best effort" support, Websense Technical Support makes a best effort to troubleshoot cases in standard fashion until the issue is deemed a Red Hat Enterprise Linux- or CentOS-specific issue, at which point you must contact Red Hat directly for assistance.

Websense recommends that the Red Hat Enterprise Linux version that will host Content Gateway be updated to the latest patch before running the version 8.0 Content Gateway installer.

Websense also recommends that Red Hat Enterprise Linux systems that host Content Gateway be registered with Red Hat Network and kept up-to-date with the latest security patches.


	Important You can update packages on your Red Hat Enterprise Linux installations and patch kernels if the underlying kernel upgrade does not change the kernel ABI.


	Important Content Gateway is designed to run on a dedicated machine and is not guaranteed to be compatible with other server applications installed on the same machine.

For a complete description of platform requirements, see Requirements overview.