Deployment considerations for integration with Check Point products

Integrating Web Security with Check Point > Deployment considerations for integration with Check Point products

Deployment and Installation Center | Web Security Solutions | Version 7.7.x

Applies to:

In this topic

Web Filter and Web Security, v7.7.x

Simple

Distributed

This section includes a general discussion of 2 common Check Point integration deployment options: simple deployment with unified components, and distributed deployment.

Related topics:

Getting started with a Check Point integration

Configuring Check Point products to work with Web Security solutions

Configuring CheckPoint secure communication

Simple

In the simplest and most common network topology, an organization has one firewall that resides on a dedicated server. All Web Security components are installed on a separate machine on the internal network.

TRITON Unified Security Center and reporting components are installed on a separate machine.

If you install Network Agent, it must be positioned to see all traffic on the internal network. HTTP requests are handled by the Check Point appliance, and non-HTTP traffic is managed by Network Agent, which is positioned to detect all outbound traffic.

The diagram provides a general overview and best practice location for your integration product, but does not show all Websense components. Larger networks require Websense components to be distributed across several dedicated machines.

Distributed

In the following illustration, Websense filtering software is installed on a single machine in a central location where it can manage both non-HTTP and HTTP traffic. HTTP requests are handled by the Check Point appliance, and the non-HTTP traffic is managed by Network Agent, which is positioned to detect all outbound traffic.

To avoid performance and security issues, do not install Websense components on a machine running Check Point software. Network Agent will not function correctly if installed on the Check Point machine.


	Warning Do not install Network Agent on the same machine as Check Point software.

Integrating Web Security with Check Point > Deployment considerations for integration with Check Point products