Technical Library | Support

Go to the table of contents Go to the previous page Go to the next page
Installing Web Security for Universal Integrations
Installing Web Security for Universal Integrations
Deployment and Installation Center | Web Security Solutions | Version 7.7.x
 
Applies to:                                         
In this topic                                       
*
Web Filter and Web Security, v7.7.x
*
Installing Web Security for universal integrations
*
Migrating to a different integration after installation
This document describes integrating Websense Web Security solutions with supported integration products other than those addressed in the following topics:
*
Integrating Web Security with Check Point
*
Integrating Web Security with Cisco
*
Integrating Web Security with Citrix
*
Integrating Web Security using ICAP Service
*
Integrating Web Security with Microsoft Products
Refer to the list of Websense Technology Partners (www.websense.com/global/en/Partners/TAPartners/SecurityEcosystem/) to verify that Websense software supports an integration with your firewall, proxy server, caching application, or network appliance.
Integrating Websense software with another product or device affects the following Websense components:
*
Filtering Service interacts with your integration product and Network Agent to determine whether Internet requests are blocked or permitted.
*
Network Agent manages Internet protocols that are not managed by your integration product. It can also detect HTTP network activity (managed by the integration) to enable bandwidth reporting.
When the integration product receives an Internet request, it queries Websense Filtering Service to find out if the requested site should be blocked or permitted. Filtering Service consults the policy assigned to the client determines how the requested site is categorized.
*
If the site is assigned to a blocked category, the client receives a block page instead of the requested site.
*
If the site is assigned to a permitted category, Filtering Service notifies the integration product to grant access to the site.
Installing Web Security for universal integrations
This section provides a general overview of the installation process, highlighting the steps important to enabling integration.
For detailed installation instructions, see Installing Web Security solutions.
1.
When you install Filtering Service, on the Integration Option screen, select Integrated with another application or device.
2.
On the Select Integration screen, select Other (Universal Integration).
3.
On the Transparent User Identification screen you can choose whether to install a Websense transparent identification agent.
*
If your integration product provides user authentication or identification services, or if you do not intend to use user and group-based filtering, select None.
*
To use Websense software for user identification, select the agent or combination of agents appropriate for your deployment.
4.
Follow the remaining installer prompts to complete the installation.
After installation is complete:
*
To prevent users from circumventing Websense filtering, configure your firewall or Internet router to allow outbound HTTP, HTTPS, FTP, and Gopher requests only from your integration product.
Contact your router or firewall vendor for information about configuring access lists for that product.
*
If Internet connectivity of Websense software requires authentication through a proxy server or firewall for HTTP traffic, the proxy server or firewall must be configured to accept clear text or basic authentication to enable the Websense Master Database download.
*
Depending on the integration product you are using, you may also need to configure client computers to access the Internet through it to enable Websense filtering. Consult your integration product's documentation to make this determination.
Migrating to a different integration after installation
You can change your integration product or version after installing Websense software without losing any of your configuration data.
1.
Install and configure your new integration product. See your integration product documentation for instructions.
Ensure that it is deployed in your network such that it can communicate with Filtering Service and Policy Server.
2.
Use the Websense Backup Utility to backup the Websense configuration and initialization files. See TRITON - Web Security Help for instructions
3.
Ensure that Websense software is running. The installer looks for Policy Server during the installation process.
4.
Remove Filtering Service using the procedures for removing components in the installation materials.
 
* 
Warning 
Remove Filtering Service only. Do not remove the associated Policy Server.
If you have uninstalled Filtering Service from a Windows machine, restart the machine to complete the remove process.
5.
Close any open applications, and stop any antivirus software, then run the Websense installer again.
6.
Add Filtering Service using the procedures for installing individual components. See Adding Web Security components.
7.
On the Integration Option screen, select Integrated with another application or device.
8.
On the Select Integration screen, select Other (Universal Integration).
9.
Follow the installer prompts to complete the installation.
The installer adds the new integration data, while preserving the previous configuration data.
On Windows machines, to complete the installation, restart the machine.
10.
Verify that Filtering Service has started.
*
Windows: Open the Services dialog box (Start > Programs > Administrative Tools > Services) and check to see if Websense Filtering Service is started.
*
Linux: Navigate to the Websense installation directory (/opt/Websense, by default), and enter the following command to see if Websense Filtering Service is running:
./WebsenseAdmin status
To start a service, follow the instructions in the installation materials.
11.
To identify which Filtering Service instance is associated with each Network Agent:
a.
Log on to TRITON - Web Security and go to Settings > Network Agent.
b.
Highlight the General option, then select a Network Agent IP address to open its Local Settings page.
c.
Under Filtering Service Definition, select the IP address for the machine running Filtering Service. During the migration, the setting may have been reset to None.
For more information, see the Network Configuration > Local Configuration topic in the TRITON - Web Security Help.
12.
If you stopped your antivirus software, be sure to start it again.

Go to the table of contents Go to the previous page Go to the next page
Installing Web Security for Universal Integrations
Copyright 2016 Forcepoint LLC. All rights reserved.