Technical Library | Support

Go to the table of contents Go to the previous page Go to the next page
Integrating Web Security with Cisco > Deployment considerations for integration with Cisco products
Deployment considerations for integration with Cisco products
Deployment and Installation Center | Web Security Solutions | Version 7.7.x
 
Applies to:                                         
In this topic                                       
*
Web Filter and Web Security, v7.7.x
*
Cisco PIX/ASA
*
Cisco Content Engine
*
Cisco IOS Routers
Related topics:
*
Getting started with a Cisco integration
*
Configuring a Cisco Security Appliance
*
Configuring a Cisco IOS Router
*
Configuring a Cisco Content Engine
Cisco PIX/ASA
A simple and common network topology places Websense filtering components on a single machine, or group of dedicated machines, communicating with a Cisco PIX Firewall or Cisco Adaptive Security Appliance (ASA) via TCP/IP.
*
TRITON Unified Security Center and reporting components are installed on a separate machine.
*
If you install Network Agent, it must be positioned to see all traffic on the internal network.
See Integrating Web Security with Cisco for configuration instructions.
Other configurations are possible. See your Cisco PIX Firewall or ASA documentation and the information in this section to determine the best configuration for your network.
The diagram provides a general overview and best practice location for your integration product, but does not show all Websense components. Larger networks require Websense components to be distributed across several dedicated machines.
Cisco Content Engine
In this common configuration, Websense filtering components are installed on a single machine, communicating with the Cisco Content Engine through TCP/IP.
*
TRITON Unified Security Center and reporting components are installed on a separate machine.
*
If you install Network Agent, it must be positioned to see all traffic on the internal network.
Other configurations are possible. See your Content Engine documentation and the information in this chapter to determine the best configuration for your network.
The diagram provides a general overview and best practice location for your integration product, but does not show all Websense components. Larger networks require Websense components to be distributed across several dedicated machines.
Cisco IOS Routers
In this common configuration, Websense filtering components are installed on a single machine, communicating with the Cisco IOS Router.
*
TRITON Unified Security Center and reporting components are installed on a separate machine.
*
If you install Network Agent, it must be positioned to see all traffic on the internal network.
The router has firewall functionality and can be used with or without an accompanying firewall.
If the Cisco IOS Router is used with a separate firewall, ensure that all Internet traffic is configured to pass through the router and is not set to bypass the router and go directly to the firewall. Traffic filtered through the separate firewall cannot be filtered by the Websense software.
Other configurations are possible. See your Cisco Router documentation and the information in this chapter to determine the best configuration for your network.
The diagram provides a general overview and best practice location for your integration product, but does not show all Websense components. Larger networks require Websense components to be distributed across several dedicated machines.

Go to the table of contents Go to the previous page Go to the next page
Integrating Web Security with Cisco > Deployment considerations for integration with Cisco products
Copyright 2016 Forcepoint LLC. All rights reserved.