Deployment and Installation Center
Websense TRITON Enterprise v7.6.x

Go to the table of contents Go to the previous page Go to the next page Go to the index
Squid Web Proxy Cache Integration > Installing Web Filter or Web Security to integrate with Squid Web Proxy Cache

The Squid plug-in must be installed on the Squid Web Proxy Cache machine (Squid machine) to allow Websense Filtering Service and the Squid software to communicate.
Note 
Prior to installing Websense software verify you have a correctly installed and operating version of Squid Web Proxy Cache. See Squid documentation and support resources for installation and configuration instructions.
You can install the Websense components on the Squid machine or on a different machine. If you install Filtering Service on the Squid machine, you must still install the Squid plug-in as well.
If you install Filtering Service on a separate machine from Squid Web Proxy Cache, you must subsequently install the Squid plug-in on every Squid machine that communicates with Filtering Service.
Important 
If you are installing Websense software on a machine running an SELinux-enabled Red Hat Enterprise Linux operating system* with the version of Squid that is prepackaged with the Red Hat installation, Squid cannot launch the Websense Squid plug-in (WsRedtor).
If the plug-in does not launch, Websense filtering cannot occur. Configure SELinux permissions so that WsRedtor can launch. See your Red Hat Enterprise Linux documentation for details.
Websense Filtering Service must be installed on its machine before installing the Websense Squid plug-in on the Squid machine. Filtering Service must be installed as integrated with Squid Web Proxy Cache.
Install Websense Network Agent to filter non-HTTP(S)/FTP traffic (e.g., instant messaging, streaming media, peer-to-peer, and so forth) which is not handled by Squid Web Proxy Cache. If Network Agent is installed on a separate machine, it must be connected to a bi-directional span port on a network switch (see the Deploying Network Agent for information about where to place Network Agent in your network). If Network Agent is installed on the Squid machine, connecting to a span port is not necessary.
Note 
If Filtering Service is installed on a separate machine from the Squid machine, it must be installed before you install the Squid plug-in. When it is installed, Filtering Service must be installed as integrated with Squid Web Proxy Cache. You must specify the location of Filtering Service when installing the Squid plug-in, otherwise the installer will not proceed.
When installing the Squid plug-in, the installer checks for Squid Web Proxy Cache on the installation machine. If Squid Web Proxy Cache is detected, the installer continues.
Note 
The following instructions are a supplement to the full instructions in the Installing Web Security components. These instructions cover only those installer screens involved in installing the Websense Squid plug-in.
The Web Security Linux installer is used to install the Websense Squid plug-in on the Squid machine. The following procedure is performed on the Squid machine.
Note 
Websense Filtering Service must be installed on its machine before installing the Squid plug-in on this machine.
Important 
Make sure visible_hostname is set in the squid.conf file before installing the Squid plug-in. See your Squid documentation for instructions.
Notes
These instructions refer to GUI installer screens. There are GUI and command-line versions of the Web Security Linux installer. In the command-line version, prompts are displayed that correspond to each GUI screen. Instructions for a screen also apply to the corresponding command-line prompt. The main difference is how options are selected. Rather than clicking items in a screen, you will enter menu-item numbers or characters.
To cancel the command-line installer, press Ctrl-C. However, do not cancel the installer, after the Pre-Installation Summary screen, as it is installing components. In this case allow the installation to complete and then uninstall the components you did not want to install.
3.
On the Introduction screen, click Next.
4.
On the Subscription Agreement screen, choose to accept the terms of the agreement and then click Next.
5.
On the Installation Type screen, select Custom and then click Next.
6.
On the Custom Installation screen, select Filtering Plug-in and then click Next.
7.
On the Filtering Service Communication screen, enter the IP address of the machine on which Filtering Service is installed and the port Filtering Service uses to communicate with integration products and Network Agent (default is 15868). Then click Next.
The port used by Filtering Service to communicate with integration products and Network Agent must be in the range 1024-65535. Filtering Service may have been automatically configured to use a port other than the default 15868. When Filtering Service was installed, if the installation program found the default port to be in use, it was automatically incremented until a free port is found. To determine what port is used by Filtering Service, check the eimserver.ini file—located in C:\Program Files or Program Files (x86)\Websense\Web Security\bin (Windows) or /opt/Websense/bin (Linux)—on the Filtering Service machine. In this file, look for the WebsenseServerPort value.
Important 
Do not modify the eimserver.ini file.
8.
On the Select Integration screen, select Squid Web Proxy Cache.
9.
On the Squid Configuration screen, enter paths to the squid.conf and squid executable files, and then click Next.
The installation program will verify the path to squid.conf. A default path is automatically entered. Enter a different path if necessary or click Browse to navigate to the location. This path must be verified for the installation to continue. (Note: the path must include the file name.)
Note 
The installer will automatically start Squid Web Proxy Cache once installation is complete. Verify it is running after installation is complete (Step 14 below).
10.
On the Installation Directory screen, accept the default installation path, or click Choose to specify another path, and then click Next.
11.
On the Pre-Installation Summary screen, verify the information shown.
Filtering Plug-in should be listed as the only component to be installed.
12.
Click Next to start the installation. An Installing progress screen is displayed. Wait for the installation to complete.
13.
On the Installation Complete screen, click Done.
The installer attempts to start Squid Web Proxy Cache once installation is complete. In some cases, it must be manually started:
See Squid documentation or support resources for the start command appropriate to your installation of Squid Web Proxy Cache.
If the machine has sufficient resources, Websense software may be installed on the same machine as Squid Web Proxy Cache. You may install all core Websense components (see below) or particular components (see Particular Websense components on the Squid machine)
Note 
Installing all core Websense components on one machine is typically appropriate for small networks (less than 500 users, or less than 25 Internet requests per second).
Follow the installation instructions in Filtering installation. The steps below provide specific options to select, or alternate instructions to be used, as you follow the instructions in the installation materials. Unless a specific option or alternative instruction is provided here, you should follow the steps as described in the installation materials.
Note 
Following this procedure installs Websense Network Agent on this machine. Network Agent can be used to filter non-HTTP(S)/FTP traffic (e.g., instant messaging, streaming media, peer-to-peer, and so forth) which is not handled by Squid Web Proxy Cache.
1.
On the Introduction screen, click Next.
2.
On the Subscription Agreement screen, choose to accept the terms of the agreement and then click Next.
3.
On the Installation Type screen, select Filtering and then click Next.
4.
At the Integration Option screen, select Integrated with another application or device.
5.
On the Select Integration screen, select Squid Web Proxy Cache.
6.
On the Filtering Plug-In screen, select both Yes, install the plug-in on this machine and Install other selected components.
See Filtering Plug-In Screen for more information about these options.
7.
On the Squid Configuration screen, enter paths to the squid.conf and squid executable files, and then click Next.
The installation program will verify the path to squid.conf. A default path is automatically entered. Enter a different path if necessary or click Browse to navigate to the location. This path must be verified for the installation to continue. (Note: the path must include the file name.)
Note 
The installer will automatically start Squid Web Proxy Cache once installation is complete. Verify it is running after installation is complete (Step 9 below).
The installer attempts to start Squid Web Proxy Cache once installation is complete. In some cases, it must be manually started:
See Squid documentation or support resources for the start command appropriate to your installation of Squid Web Proxy Cache.
Web Security components may be distributed across multiple machines. Depending on the size of your deployment (i.e., number of users and amount of network traffic) there are best practices of grouping certain components together on the same machine and separating certain components onto their own machine (e.g. reporting components). See the General Deployment Recommendations for Web Security for information about distributing components across machines.
Note 
Websense Filtering Service must be installed on its machine before installing the Websense Squid plug-in on the Squid machine. Additionally, Filtering Service must be installed as integrated with Squid Web Proxy Cache. If Filtering Service will be on the Squid machine, it can be installed at the same time as the Squid plug-in.
c.
Follow the installation instructions in Custom installation to select and install components. Follow the instructions to completion.
On the Select Components screen, be sure to select Filtering Plug-In along with any other Websense components to be installed on the Squid machine.
You can install Websense Network Agent to filter non-HTTP(S)/FTP traffic (e.g., instant messaging, streaming media, peer-to-peer, and so forth) which is not handled by Squid Web Proxy Cache. If Network Agent is installed on the Squid machine it does not need to be connected to a span port on a network switch (as it would if installed on a separate machine). See the Deploying Network Agent for more information about the placement of Network Agent in a network.
To install the filtering plug-in (i.e., Squid plug-in), the installer stops Squid Web Proxy Cache. At the end of the installation process, the installer automatically starts Squid Web Proxy Cache. In some cases, the installer is unable to start Squid Web Proxy Cache and it must be manually started:
See Squid documentation or support resources for the start command appropriate to your installation of Squid Web Proxy Cache.


Go to the table of contents Go to the previous page Go to the next page Go to the index
Squid Web Proxy Cache Integration > Installing Web Filter or Web Security to integrate with Squid Web Proxy Cache