System Requirements

System Requirements

Applies to

Web Filter v7.6.x

Web Security v7.6.x

Web Security Gateway v7.6.x

Web Security Gateway Anywhere v7.6.x

Email Security Gateway v7.6.x

Data Security v7.6.x

In this topic

TRITON management server

Web Security and Web Security Gateway

Email Security Gateway

Data Security

TRITON management server

The machine on which TRITON Unified Security Center and certain optional components are installed is referred to as the TRITON management server.

Operating system

The following operating systems are supported for a TRITON management server.

	Windows Server 2003 R2 32-bit*	Windows Server 2008 32-bit	Windows Server 2008 R2 64-bit**	V-Series Appliance
TRITON – Data Security
TRITON – Web Security
TRITON – Email Security
*Windows 2003 supported for a single module (TRITON – Web Security or TRITON – Data Security) but not for a combination of applications. In such deployments, TRITON infrastructure is installed plus the relevant module. In this case, the TRITON Unified Security Center will run with one module enabled, and the other two disabled. ** Windows Server 2008 R2 64-bit supports both Standard and Enterprise versions.

Hardware requirements

The following are minimum hardware recommendations for a TRITON management server. The requirements are different depending on whether SQL Server 2008 R2 Express is installed on the management server (local database) or a remote installation of SQL Server is used (remote database).

With local database

TRITON Unified Security Center Module(s)	Minimum Requirements
TRITON - Web Security	4 CPU cores (2.5 GHz), 4 GB RAM, 100 GB Disk Space
TRITON - Data Security	4 CPU cores (2.5 GHz), 8 GB RAM, 240 GB Disk Space
TRITON - Web Security and - Data Security	4 CPU cores (2.5 GHz), 8 GB RAM, 240 GB Disk Space
TRITON - Email Security and - Data Security	4 CPU cores (2.5 GHz), 8 GB RAM, 240 GB Disk Space
TRITON - Web Security, - Data Security, and - Email Security	8 CPU cores (2.5 GHz), 16 GB RAM, 240 GB Disk Space

Notes:

Data Security allows installation of the Forensics repository on a remote location. If you use this mode and store your forensics on a separate hard drive you can deduct 90GB from the above stated disk space requirements.

It is strongly recommended you have more disk space than the minimum specified above to allow for scaling with use.

If you choose to install the Websense product on a drive other than the main Windows drive (typically C drive), then you must have at least 2GB free on the main Windows drive to accommodate for files to be extracted to this drive.

With remote database

TRITON Unified Security Center Module(s)	Minimum Requirements
TRITON - Web Security	4 CPU cores (2.5 GHz), 4 GB RAM, 7 GB Disk Space
TRITON - Data Security	4 CPU cores (2.5 GHz), 8 GB RAM, 140 GB Disk Space
TRITON - Web Security and - Data Security	4 CPU cores (2.5 GHz), 8 GB RAM, 146 GB Disk Space
TRITON - Email Security and - Data Security	4 CPU cores (2.5 GHz), 8 GB RAM, 146 GB Disk Space
TRITON - Web Security, - Data Security, and - Email Security	8 CPU cores (2.5 GHz), 16 GB RAM, 146 GB Disk Space

Note:

It is strongly recommended you have more disk space than the minimum specified above to allow for scaling with use.

If you choose to install the Websense product on a drive other than the main Windows drive (typically C drive), then you must have at least 2GB free on the main Windows drive to accommodate for files to be extracted to this drive.

Browser

The following Web browsers are supported by TRITON Unified Security Center.

Browser	Versions
Internet Explorer	7, 8*, and 9
Firefox	3.5, 3.6, and 4
* For Internet Explorer 8 only, do not use compatibility mode.

Virtualization systems

All TRITON management components are supported on these virtualization systems.

Supported Virtualization Systems

Hyper-V over Windows Server 2008 R2 (x64, 64-bit)

VMware – Any version that supports virtualization of Windows 2008 and above.

TRITON local database system

"Local" database system refers to one installed on the TRITON management server itself. The local database system provided by Websense is SQL Server 2008 R2 Express (32-bit version). For smaller enterprises, if you want to run SQL Server on the TRITON management server, it is a best practice to use SQL Server 2008 R2 Express. For larger enterprises, however, it is a best practice to run the TRITON Unified Security Center and SQL Server on separate physical machines. Note: the 32-bit version may be installed on any of the operating systems supported for the TRITON management server (see Operating system).

TRITON remote database system

"Remote" database system refers to one installed on a server separate from the TRITON management server. The following are supported.

Supported Databases	Data Security	Web Security	Email Security
SQL Server 2005*
SQL Server 2008**
SQL Server 2008 R2 Express
SQL Server 2008 R2***
*All editions except Web, Express, and Compact; all service packs; 32- and 64-bit, but not IA64. **All editions except Web, Express, and Compact; all service packs, 32- and 64-bit, but not IA64. ***All editions except Web and Compact; all service packs, 32- and 64-bit, but not IA64. Note: Clustering supported for all supported versions of SQL Server noted above.

Directory Services for Administrators

TRITON Unified Security Center can authenticate administrator accounts against the following:

Microsoft Active Directory

Novell eDirectory

Lotus Notes

Oracle Directory Server

Generic LDAP directories

Web Security and Web Security Gateway

Software deployments

Web Security components supports the following operating systems with a few exceptions:

Windows Server 2003 R2 32-bit

Windows Server 2008 32-bit

Windows Server 2008 R2

Red Hat Enterprise Linux 4

Red Hat Enterprise Linux 5

Websense Content Gateway supports

Red Hat Enterprise Linux 5

See System requirements for Websense Content Gateway for more information.

Exceptions:

The following components are Windows only (do not support Linux)

Linking Service

Log Server

DC Agent

Real-Time Monitor

Appliance deployments

The following components do not run on appliances; they must be installed off-appliance.

Real-Time Monitor

Web Security Log Server

Linking Service

Sync Service

Remote Filtering Server

All transparent identification agents:

DC Agent

eDirectory Agent

Logon Agent

RADIUS Agent

Client OS

Application	Windows 7	Windows XP	Windows Vista	Windows Server 2003	Windows Server 2008
Logon App
Remote Filtering
Web Endpoint
Note: Both 32- and 64-bit versions of all these operating systems are supported by these applications

Integrations

Websense Web Security may be integrated with the following products.

Product	Version(s)
Microsoft ISA Server	2004 Standard and Enterprise, 2006 Standard and Enterprise
Microsoft Forefront TMG	2008 or later
Cisco PIX Firewall	v5.3 or later
Cisco ASA	PIX v7.0 or later
Cisco Content Engine	ACNS v5.5 or 5.6
Cisco Router	IOS v12.3 or later
Check Point Firewall-1	FP1 or later, NG AI, NGX
Check Point UTM-1 Edge	n/a
Check Point VPN-1 Edge	n/a
Squid Web Proxy Cache	STABLE v2.5 and v2.6
Citrix MetaFrame Presentation Server	3.0
Citrix Presentation Server	4.0, 4.5
Citrix XenApp	5.0
	6.0

Directory Services

Directory Service	Version(s)
Microsoft Active Directory (native or mixed mode)	2008, 2003
Microsoft Windows NT Directory	v2, v1
Novell eDirectory	v8.5.1 or later
Oracle Directory Services Enterprise Edition	11g
Sun Java	7, 6.2

RADIUS

Most standard RADIUS servers are supported. The following have been tested:

Microsoft IAS

Merit AAA

Livingston (Lucent) 2.x

Cistron RADIUS server

NMAS authentication

Web endpoint

Web Endpoint can be deployed on the following operating systems:

Windows XP with Service Pack 2 or higher (32-bit and 64-bit)

Windows Vista with Service Pack 1 or higher (32-bit and 64-bit)

Windows 7 (32-bit and 64-bit)

The following Web browsers fully support the endpoint on both 32-bit and 64-bit operating systems:

Internet Explorer 7, 8, and 9

Firefox 3.x, 4.x, 5, 6, and 7

Full support means that the browser supports all installation methods, and both Web scanning and filtering and proxy manipulation. All Web browsers support GPO deployment, and Web scanning and filtering with the endpoint.

Email Security Gateway

Email Security Gateway is exclusively appliance-based (V10000 G2 or V5000 G2) except for the following components:

TRITON – Email Security (see TRITON management server)

Email Security Log Server

Email Security Log Server

This is the only Email Security component that can be located off-management-server or appliance.

Email Security Gateway Component	Supported Operating System
Email Security Log Server	Windows 2008 (x86 and x64)
	Windows 2003 (x86)

Data Security

Operating system

Data Security Component	Supported Operating Systems	32-bit	64-bit
Management server and supplemental servers	Windows Server 2003 Standard or Enterprise, R2 SP2
	Windows Server 2008 Standard or Enterprise
	Windows Server 2008 Standard or Enterprise, R2
Crawler agent	Windows Server 2003 Standard or Enterprise, R2 SP2
	Windows Server 2008 Standard or Enterprise
	Windows Server 2008 Standard or Enterprise, R2
SMTP Agent	Windows Server 2003 Standard or Enterprise, R2
	Windows Server 2003 Standard or Enterprise, R2 SP2
ISA Agent (ISA Server 2004/2006)	Windows Server 2003 Standard or Enterprise
	Windows Server 2003 Standard or Enterprise, R2
	Windows Server 2003 Standard or Enterprise, R2 SP2
TMG Agent (Forefront TMG) 2008	Windows Server 2008 R2
Printer agent	Windows Server 2003 Standard or Enterprise
	Windows Server 2003 Standard or Enterprise, R2
	Windows Server 2003 Standard or Enterprise, R2 SP2
Protector***	CentOS 5.5**
Mobile Agent	CentOS 5.5**
Data Endpoint client	Windows 7
	Windows Vista
	Windows XP
	Windows Server 2008
	Windows Server 2003
	Red Hat Enterprise Linux/CentOS 4.8
	Red Hat Enterprise Linux/CentOS 5.1 with stock kernel 2.6.18-53.el5
	Red Hat Enterprise Linux/CentOS 5.4 and on, including stock kernel 2.6.18-164.el5 and above)
Note: by default, Windows Server 2003 or XP support only 3 agents per client. If your endpoint clients will be running multiple agents—for example the endpoint agent, an antivirus agent, and an antispam agent—they should be updated to Windows XP SP3 or Windows Server 2003 SP2. In addition, you must modify their registry entries. *Requires .NET 2.0 installed on system. **This operating system is installed as part of the Protector "soft appliance" installation. ***Protector is supported on virtualization systems in the Mail Transport Agent (MTA) mode and/or as an ICAP server with remote analysis (no local analysis). Other modes of deployment are not certified.

Data Security Server hardware requirements

Data Security Server	Minimum Requirements	Recommended
CPU	2 Dual-core Intel Xeon processors (2.0 GHz) or AMD equivalent	2 Quad-core Intel Xeon processors (2.0 GHz) or AMD equivalent
Memory	2 GB	4 GB
Hard drives	Four 72 GB	Four 146 GB
Disk space	72 GB	292 GB
Free space	70 GB	70 GB
Hardware RAID	1	1 + 0
NICs	1	2

Data Security Server software requirements

The following requirements apply to all Data Security servers:

For optimized performance of Websense Data Security, verify that the operating system's file cluster is set to 4096B. For more information, see the Websense knowledge article: "File System Performance Optimization."

Windows installation requirements:

Set the partition to 1 NTFS Partition. For more information, see the Websense knowledge-base article: "File System Performance Optimization."

Regional Settings: should be set according to the primary location. If necessary, add supplemental language support and adjust the default language for non-Unicode programs.

Configure the network connection to have a static IP address.

The Data Security Management Server computer name must not include an underscore sign. Internet Explorer does not support such URLs.

Short Directory Names and Short File Names must be enabled. (See http://support.microsoft.com/kb/121007.)

Create a local administrator to be used as a service account. If more than one Data Security Server will be in your deployment, use a domain account (or the same username and password on each server if using local accounts).

It's necessary to set the system time accurately on the server onto which you install the TRITON management server.

Protector hardware requirements

 

Protector	Minimum Requirements	Recommended
CPU	2 Dual-core Intel Xeon processors (2.0 GHz) or AMD equivalent	2 Quad-core Intel Xeon processors (2.0 GHz) or AMD equivalent
Memory	2 GB	4 GB
Hard drives	2 - 72 GB	4 - 146 GB
Disk space	70 GB	292 GB
Hardware RAID	none	1 + 0
NICs	2 (monitoring), 3 (inline)	2 (monitoring), 3 (inline)

Recommended (optional) additional NICs for inline mode:

The following Silicom network cards are supported by the Data Security appliance. NICs SKUs are:

PEG4BPi - Intel-based Quad-Port Copper Gigabit Ethernet PCI-Express Bypass Server Adapter

PEG2BPi - Intel-based Dual-Port Copper Gigabit Ethernet PCI-Express Bypass Server Adapter

PXG4BPi - Intel-based Quad-Port Copper Gigabit Ethernet PCI-X Bypass Server Adapter

PXG2BPi - Intel-based Dual-Port Copper Gigabit Ethernet PCI-X Bypass Server Adapter

PEG2Fi - Intel-based Dual-Port Fiber (SX) Gigabit Ethernet PCI-Express Server Adapter

PXG2Fi - Intel-based Dual-Port Fiber (SX) Gigabit Ethernet PCI-X Server Adapter

 

Note  Websense does not support bypass products with -SD drivers. If you are ordering a NIC based on Intel chips 82546 or 82571, be sure to order them in non-SD mode.

Mobile Agent hardware requirements

 

Mobile Agent	Minimum Requirements	Recommended
CPU	4 core processors (for example, Single quad or two dual core processors), 2.0 GHz Intel Xeon or AMD equivalents	4 core processors (for example, Single quad or two dual core processors), 2.0 GHz Intel Xeon or AMD equivalents
Memory	8 GB	8 GB
Hard drives	2 - 72 GB	4 - 146 GB
Disk space	70 GB	292 GB
Hardware RAID	none	1 + 0
NICs	2	2

 

Data Endpoint hardware requirements

Windows

Pentium 4 (1.8 GHz or above)

At least 512 MB RAM on Windows XP or 1GB RAM on Windows Vista, Windows 7, Windows Server 2003, or Windows Server 2008

At least 200 MB free hard disk space

Linux

At least 1 GB RAM

1 GB free hard disk space (not including contained files and temporary buffers; see the TRITON - Data Security Help for information about contained files and allocating enough disk storage for them)

 

System Requirements