Agent	Description
Protector	The protector is a standard part of Websense Data Security deployments. It is a soft appliance with a policy engine and a fingerprint repository, and it supports analysis of SMTP, HTTP, HTTPS, FTP, plain text, and IM traffic (chat and file transfer). The protector is also an integration point for third-party solutions that support ICAP (when Websense Content Gateway is not used for this purpose). Note: For HTTPS traffic, the protector works with a Web proxy such as Websense Content Gateway. See Protector for more information.
SMTP agent	SMTP is the protocol used for sending email to recipients outside the organization. The SMTP agent monitors SMTP traffic. It receives all outbound email from the mail server and forwards it to the Data Security policy engine. It then receives the analyzed email back from the policy engine, and blocks or forwards it to the mail gateway as directed See SMTP agent for more information.
ISA/TMG agent	The ISA agent receives all Web (HTTP or HTTPS) connections from a Microsoft ISA or Forefront TMG Server network and forwards them to the Data Security policy engine. It then receives the analyzed information back from the policy engine and forwards it to the recipients on the Web. See Microsoft ISA/TMG agent for more information.
Endpoint agent	Data Endpoint monitors all data activity on endpoint machines and reports on data at rest on those machines. With the endpoint agent, you can monitor application operations such as cut, copy, paste, and print screen and block users for copying files, or even parts of files, to endpoint devices such as thumb drives. The endpoint agent can also monitor or block print operations. See Installing and Deploying Websense Endpoint Clients for more information.
Printer agent	The printer agent is installed on a Microsoft print server. It monitors data that is sent to network printers through optical character recognition (OCR) technology. See Printer agent for more information.
Web Content Gateway	A Data Security policy engine is embedded in Websense Content Gateway. No agent installation is required; however, the policy engine is not active until registered with a TRITON management server. See Content Gateway Help for registration instructions.
Email Security Gateway	A Data Security policy engine is embedded in Email Security Gateway. No agent installation is required; however, the policy engine is not active until registered with a TRITON management server. See the TRITON - Email Security Help for registration instructions.
Mobile agent	The mobile agent monitors and blocks activities on mobile devices that perform synchronization operations with the Exchange server. With the mobile agent, you can monitor and block data transmitted in email messages, calendar events, and tasks. It is on a Websense appliance, or you can install it on your own hardware. The mobile agent supports ActiveSync, which is a wireless communication protocol used to push resources, such as email, from applications to mobile devices. See Mobile agent for more information.
Integration agent	The Integration agent allows third-party products to send data to Websense Data Security for analysis. It is embedded in third-party installers and communicates with Data Security via a C-based API. See Integration agent for more information.
Crawler	The crawler is the name of the agent that performs discovery and fingerprinting scans. The crawler is installed automatically on the TRITON Management Server and other Data Security servers. If you want to improve scanning performance in high transaction volume environments, you can install it stand-alone on another server as well. See The crawler for more information.

Important  Data Security agents and machines with a policy engine (such as a Data Security Server or Websense Content Gateway machine) must have direct connection to the TRITON management server. When deployed in a DMZ or behind a firewall, the relevant ports must be allowed.