Technical Library | Support

Go to the table of contents Go to the previous page Go to the next page
Integrating Web Security with Microsoft Products > Installing Web Security to integrate with Forefront TMG
Installing Web Security to integrate with Forefront TMG
Deployment and Installation Center | Web Security Solutions | Version 7.7.x
 
Applies to:                                         
In this topic                                       
*
Web Filter and Web Security, v7.7.x
*
Installing the ISAPI Filter plug-in for Forefront TMG
The general process of installing Websense Web Security solutions to integrate with Microsoft Forefront TMG is as follows:
1.
Begin by installing Web Security policy, management, and reporting components in your network (not on the TMG machine).
*
See Installation overview: Web Filter and Web Security for instructions.
*
Websense Filtering Service must already be installed before the ISAPI Filter plug-in is installed on the TMG machine. When installing Filtering Service, specify that it is integrated with TMG.
 
2.
Install the ISAPI Filter plug-in on the TMG machine (as described below).
The Forefront TMG plug-in installer, rather than the TRITON Unified Installer, is used to install the ISAPI plug-in for Forefront TMG, as described in the next section.
The only Websense components installed on the Forefront TMG machine are the ISAPI Filter plug-in and Websense Control Service (which manages installation and removal of Websense software components).
Installing the ISAPI Filter plug-in for Forefront TMG
The Forefront TMG plug-in installer is used to install the Websense ISAPI Filter plug-in for Forefront TMG on the TMG machine.
Websense Filtering Service must be installed and running before you install the ISAPI Filter plug-in. Make sure that Forefront TMG integration was specified during Filtering Service installation.
* 
Important 
*
The ISAPI Filter plug-in for Forefront TMG is supported on only Windows 2008 R2.
*
As part of the installation process, you must stop the Microsoft Forefront TMG Firewall service (Firewall service). Because this may stop network traffic, perform the installation during a time when a stoppage will least affect your organization. Do not stop the Firewall service until instructed to do so by the installer.
*
Port 55933 (Websense Control Service communication port) must be open locally, for the ISAPI Filter plug-in to be installed successfully.
Before beginning the installation process:
*
Download or copy the Forefront TMG plug-in installer to this machine. This installer is available at mywebsense.com.
*
Close all applications and stop any antivirus software.
To perform the installation:
1.
Start the Forefront TMG plug-in installer. When the Introduction screen displays, click Next.
2.
On the Subscription Agreement screen, after accepting the terms of the agreement, click Next.
3.
On the Filtering Service Communication screen, enter the IP address of the machine on which Filtering Service is installed and the port Filtering Service uses to communicate with integration products and Network Agent (default is 15868). Then click Next.
*
The port used by Filtering Service to communicate with integration products and Network Agent must be in the range 1024-65535.
*
To verify the Filtering Service port, check the WebsenseServerPort value in the eimserver.ini file, located in the Websense bin directory on the Filtering Service machine.
4.
On the Installation Directory screen, accept the default location and click Next.
5.
On the Pre-Installation Summary screen, verify that Filtering Plug-in is the only component selected for installation, then click Install.
An Installing progress screen is displayed. Wait for the installation to complete.
6.
When the Stop Microsoft Forefront TMG Firewall Service screen appears, stop the Microsoft Forefront TMG Firewall service (Firewall service) and then click Next.
 
* 
Note 
Leave the Websense installer running as you stop the Firewall service, and then return to the installer to continue installation.
To stop the Firewall service, go to the Windows Services management console (Administrative Tools > Services). Right-click Microsoft Forefront TMG Firewall, and then select Stop. When the service has stopped, return to the Websense installer and continue the installation process. The Firewall service may also be stopped from the Forefront TMG management console. See the Microsoft documentation for more information.
 
* 
Important 
When the Firewall service is stopped, Forefront TMG goes into lockdown mode. Depending on your network configuration, network traffic may be stopped. Typically, the Firewall service must be stopped for only a few minutes.
7.
When the following message appears, start the Firewall service and click OK:
The Websense ISAPI Filter has been configured, you can now start the Microsoft Firewall Service.
 
* 
Note 
Leave the Websense installer running as you start the Firewall service, and then return to the installer to continue installation.
To start the Firewall service, go to the Windows Services management console (Administrative Tools > Services). Right-click Microsoft Forefront TMG Firewall, and then select Start. The Firewall Service may also be started from the Forefront TMG management console. See the Microsoft documentation for more information.
8.
On the Installation Complete screen, click Done.
9.
If you stopped antivirus software on this machine, restart it now.
You can verify successful installation of the ISAPI Filter plug-in by logging into the Forefront TMG management console. Navigate to System > Web Filters and verify that WsISAFilter is present in the list of Web Filters.

Go to the table of contents Go to the previous page Go to the next page
Integrating Web Security with Microsoft Products > Installing Web Security to integrate with Forefront TMG
Copyright 2016 Forcepoint LLC. All rights reserved.