Technical Library | Support

Go to the table of contents Go to the previous page Go to the next page
Deploying Web Security for a distributed enterprise > Web Security basic distributed enterprise topology
Web Security basic distributed enterprise topology
Deployment and Installation Center | Web Security Solutions | Version 7.7.x
 
Applies to:                                         
In this topic                                       
*
Web Filter, Web Security, Web Security Gateway, and Web Security Gateway Anywhere, v7.7.x
*
Web Security and Web Security Gateway
*
Websense Web Security Gateway Anywhere
Web Security and Web Security Gateway
To reduce network infrastructure costs, each remote-site firewall in a decentralized network is connected directly to the Internet, rather than to a corporate WAN.
A small office/home office (SOHO) firewall is connected to an ISDN, DSL/cable, or T1 connection. Except for corporate application data that may use a virtual private network (VPN) connection, each outbound Internet request from a remote site is sent through a local Internet service provider (ISP) to the Internet.
The illustration below shows a sample network topology of this type of remote site for Websense Web Security.
Websense Web Security Gateway adds Websense Content Gateway to the deployment, as shown below.
Optionally, off-site users (remote users outside the corporate or remote-site network) can be filtered using Websense remote filtering software. This requires that Remote Filtering Server (not depicted) be deployed in the main site network and Remote Filtering Client be installed on each off-site machine. See Deploying Remote Filtering Server and Client.
The above two illustrations show a high-level scheme only. Details about how Websense filtering components might be distributed across separate machines, Content Gateway deployment, Network Agent placement, use of an integration product, and so forth are not included.
Websense Web Security Gateway Anywhere
With Web Security Gateway Anywhere, remote site and off-site users can be filtered through the hybrid service rather than by the filtering software installed at the main site.
Web Security Gateway Anywhere software is installed at the main site. This may include:
*
One or more Websense V-Series appliances running core filtering components, plus additional servers running reporting, management, and interoperability components.
*
One or more Windows or Linux servers running core filtering and interoperability components, plus Windows servers running reporting and management components.
Either Websense remote filtering software or the hybrid service can be used to manage Internet activity for remote sites or off-site machines.
See the TRITON - Web Security Help for more information about configuring the hybrid service for off-site users.

Go to the table of contents Go to the previous page Go to the next page
Deploying Web Security for a distributed enterprise > Web Security basic distributed enterprise topology
Copyright 2016 Forcepoint LLC. All rights reserved.