Deployment and Installation Center
Websense TRITON Enterprise v7.6.x

When a user on the network prints a file, it is routed to the Microsoft Windows printer spooler service, where the printer agent intercepts it and sends it to the Data Security policy engine. After analysis of the content, the Data Security system enforces the policy as necessary: either auditing, monitoring or blocking the print job from being printed, in which case the sender (the user who printed the document) receives a notification that the print job was blocked.
The printer agent is capable of identifying the user that submitted the print job, because these credentials are included in the print job.
You install the printer agent on a Windows print server. It includes optical character recognition (OCR) capabilities. The OCR service (ABBYY FineReader) is required in printer agent installations for better analysis in different printer drivers. Installation without the OCR service is limited and should be performed only after receiving verification from Websense Technical Support that your organization's specific printer driver is supported.
The OCR service enables the recognition and prevention of "corporate-defined" confidential content being printed. The OCR service is required not only to support certain sources, but is also a must when certain printer drivers are used, for example, PCL 6. As a general rule, only standard formats, such as extended meta file (EMF), printer control language (PCL), text (TXT), and postscript (PS) can be received by the printer agent. Nonstandard formats are not supported.
There are 2 prerequisites for installing the Data Security printer agent:
To install the printer agent:
Download package from
The package must be extracted to the print spooler machine. Installation must take place on the machine itself for Printer agent to function properly.
In the extracted content, open the folder ABBYY\ABBYY FineReader Engine 8.1.
There should be a subfolder named Administrator's Guide (note the apostrophe).
During extraction, that folder's name can become corrupted. If this has happened, rename the folder to Administrator's Guide. Note that in such cases, only the name of the folder is corrupted, the contents are not.
Make sure the DSS-7.6.0-x86.msi installer is in the same folder as the ABBYY and gs folders.
Run the DSS-7.6.0-x86.msi to install Printer agent.
See Installing Data Security Components for instructions. Note that those instructions assume you have reached the Websense Data Security installer by launching the general Websense installer. Skip the portions mentioning the Websense installer and follow the instructions relating to the Data Security installer.
If you are having difficulty with the recognition and configuring of your printers with the printer agent, you can export the printer registration file to send to Websense Technical Support for analysis. This file indicates printer names and drivers.
Click Start > Run and in the Run dialog, type regedit.
Click OK in the Run dialog. The Registry Editor screen is displayed.
In the Registry Editor screen, navigate to the following directory: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Printers
Click Save.
Send the exported (*.reg) file to your local Websense technical support representative.
Locate the following 2 files: ExportToTXT-Accurate.ini and ExportToTXT-Fast.ini.
Open each of the above .ini files in a text-editing application.
The printer agent has different demand levels, depending on whether it is in Monitoring or Blocking mode, and whether the OCR service is activated or deactivated.
Monitoring mode operates in an asynchronous manner and therefore, does not introduce analysis time overhead to the printing time.
In Blocking mode, the OCR processing adds up to 3 seconds per page depending on the CPU power of the printer server. You can select Blocking or Monitoring in the Edit Printer Agent window, accessed through Settings > Deployment > System Modules. Select the printer agent on the System Modules screen.
Select Monitoring if you want to monitor traffic through the print server but not block it.
Select Blocking if you want to block actions that breach policy.