Installing and Deploying Websense Endpoint Clients > Multiple agent limitations

Multiple agent limitations

Applies to

Data Security v7.6.3 and beyond

Web Security v7.6.2 and beyond

Web Security Gateway v7.6.2 and beyond

Web Security Gateway Anywhere v7.6.2 and beyond

In this topic

Multiple Websense endpoints

Third-party agents

Some Websense endpoint clients can run together on the same machine. For example, Data Endpoint can be installed with Web Endpoint or Remote Filtering Client.

Endpoint software can also be installed with third-party agents, such as an antivirus agent.

There are limitations in all multi-agent deployments to be aware of.

Multiple Websense endpoints

With the Websense Endpoint Package Builder, you can create packages for multiple agents (Web and data) and, depending on the agent, multiple operating systems (Windows and Linux). You can deploy these packages to the same or different endpoint (client) machines.

For example, you can deploy Web Endpoint and Data Endpoint on the same Windows machine; or you can deploy Remote Filtering Client and Data Endpoint on the same machine.

You cannot deploy Web Endpoint and Remote Filtering Client on the same machine. The package builder does not let you create packages for both. Likewise, you cannot deploy multiple agents on Linux machines. Only Data Endpoint supports Linux.

Here are some other restrictions to consider:

If you are deploying Web and data endpoints on the same machine, you must deploy them at the same time.

If you are deploying Web and data endpoints on the same machine, the Web Endpoint must be v7.6.2 or later and the Data Endpoint must be v7.6.3 or later. If you generate both endpoints using the Websense Endpoint Package Builder, you do not need to worry about version mismatch.

Starting with v7.6.3, the packages created by the Websense Endpoint Package Builder are backwards compatible with previous endpoint versions.

If you are using the v7.6.3 unified endpoint package builder to generate Remote Filtering Client installation packages, v7.6.2 Remote Filtering Clients are created. The package builder creates only the installation file, however, and does not include the configuration tool used to edit the Remote Filtering Client settings.

To update configuration settings for a v7.6.2 Remote Filtering Client created using the v7.6.3 unified endpoint package builder, log on to MyWebsense, and click Downloads. Next, select Websense Data Security Suite as the product and 7.6.3 as the version. The Websense Remote Filtering Client Configuration Tool appears as a download option.

To use the configuration tool:

1.	Download the ZIP file.

2.	Extract the 2 self-extracting executables from the ZIP file. As the file names indicate, one is used to configure Windows 32-bit clients, and the other is used to configure Windows 64-bit clients.

3.	Run the appropriate self-extracting executable on any Windows machine to unpack the Remote Filtering Client configuration tool.

4.	Go to http://www.websense.com/content/support/library/web/v76/remote_filtering/rfcl_config_util.aspx, and follow the instructions provided under "Configure an installation profile" to change your Remote Filtering Client configuration.

Third-party agents

By default, Windows XP and Windows Server 2003 limit the number of concurrent agents in a system. As a result, a fatal (BSOD) error may occur when users try to access files via DFS (Distributed File System) and Websense endpoint software is installed with more than 2 other agents.

To overcome this limitation, update client operating systems to Windows XP SP3 or Windows Server 2003 SP2 and follow the procedures below.

For further details, please refer to: http://support.microsoft.com/kb/906866.

On all relevant endpoint (client) machines:

1.	Make a backup copy of your Windows registry before you continue. See support.microsoft.com for details.

2.	Click Start > Run and type regedit, then click OK.

3.	Locate and then click the following registry subkey:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Mup\Parameters

4.	In the right pane, right-click DfsIrpStackSize, then click Modify.

 

Note  If the DfsIrpStackSize registry entry does not exist, you must create it. To do this, follow steps: a. On the Edit menu, point to New, then click DWORD Value. b. Type DfsIrpStackSize, then press ENTER.

5.	In the Base box, click Decimal, then type 10 in the Value data box and click OK.

6.	Exit the Registry Editor.

7.	Restart the computer.

Installing and Deploying Websense Endpoint Clients > Multiple agent limitations