Why is Network Agent not detecting Gmail Chat?

Article Number: 000002239
Products: Web Filter & Security, Web Security and Filter, Websense Enterprise
Versions: 6.3, 7.1, 7.5, 7.6, 7.7, 7.8, 8.0

Problem Description

Network Agent no longer detects and filters the Gmail Chat protocol in Websense Web Filter and Websense Web Security.

Google announced in January 2010 that all Gmail traffic would be encrypted, to protect users in Wi-Fi environments.

Because Network Agent cannot detect encryped traffic, it cannot filter the Gmail Chat protocol.


No workaround for this issue exists for current Websense Web Security/Websense Web Filter users. You must upgrade to Websense Web Security Gateway v7.5 to filter Gmail Chat.

When enabled along with Secure Sockets Layer (SSL) decryption, a tunneled application protocol detection feature in v7.5 allows Websense Web Security Gateway and Web Security Gateway Anywhere to detect and filter HTTPS traffic, including Gmail Chat. The Gmail Chat protocol is labeled "(WSG Only)" in the Instant Messaging / Chat category in the Web Security Manager Protocols list.

Use of SSL requires an SSL certificate on the client. See one of the following Knowledge Base articles for details:

See Websense Web Security Manager Online Help for information about the tunneled protocol detection feature and the Knowledge Base article titled Filtering Google Wave and Gmail Chat for information about "WSG Only" protocol signatures.

Notes & Warnings

Additional Problems and Search Terms:
Need to block Web chat in Gmail, Blocking Google Talk in Gmail