Technical Library
|
Support
Installing Web Security solutions
> Installation overview: Web Security Gateway Anywhere
Installation overview: Web Security Gateway Anywhere
Deployment and Installation Center | Web Security Solutions | Version 7.7.x
Applies to:
In this topic
Web Security Gateway Anywhere v7.7.x
Deployment
Installation
Initial configuration
Web Security Gateway Anywhere is a hybrid on-premises and in-the-cloud Web filtering solution. Users inside your corporate network are filtered by on-premises Websense components. Small, remote offices and off-site users can be filtered by Websense hybrid service clusters located across the globe.
In addition, Web Security Gateway Anywhere protects you from data loss over the Web, providing security for outbound content. You identify sensitive data and define whether you want to audit or block attempts to post it to HTTP, HTTPS, FTP, or FTP-over-HTTP channels.
Websense software is highly-distributable, providing the flexibility to scale a deployment to suit your needs. Components can be installed together on one machine for smaller organizations; or they can be distributed across multiple machines, and multiple sites, to create a high-performing deployment for larger organizations. The appropriate deployment is determined by network size and configuration, Internet request volume, hardware performance, and filtering needs.
If your deployment includes one or more V-Series appliances, additionally refer to
Installing appliance-based Websense solutions
.
The following illustration is a high-level diagram of a basic software-based deployment of Web Security Gateway Anywhere. Note that this illustration is intended to show the general distribution of components and does not include network details (such as segmenting, internal firewalls, routing, switching, and so forth).
Microsoft SQL Server is used to store Web Security and Data Security reporting data. When installing reporting components, SQL Server must be installed and running. (In very small deployments, or for evaluation, SQL Server Express, installed using the Websense installer, may be used.)
The TRITON management server hosts the Web-based management console (the TRITON Unified Security Center), and its Web Security and Data Security modules. It also hosts several additional Data Security components and Linking Service, used to share Web Security category and user information with Data Security.
Websense filtering components may be installed on the same machine or distributed across several machines. Additionally, you can install multiple instances (on different machines) of certain components to scale to your organization's needs.
Websense Content Gateway is a Web proxy that passes HTTP, HTTPS, FTP over HTTP, and native FTP traffic to Websense software for filtering. It resides on a Linux server or a V-Series appliance. Content Gateway Manager—the management console for Content Gateway—runs on the Content Gateway machine, but can be accessed from the TRITON console.
Small remote offices can be filtered through the Websense hybrid service. This is accomplished by designating a remote office as a hybrid filtered location. See
Initial Configuration for All Websense Modules
for more information.
Off-site users (e.g., telecommuters or traveling personnel) can be filtered using the Websense hybrid service, remote filtering software, or a combination of both solutions.
Deployment
System requirements for this version
Deploying Web Security core components
Extending your Web Security deployment
Web Security required external resources
Deploying transparent identification agents
Maximizing Web Security system performance
Deploying Remote Filtering Server and Client
Deploying Web Security for a distributed enterprise
Installation
Complete the following main steps (the links go to detailed procedures or information for each step).
1.
Preparing for installation
2.
Obtaining Microsoft SQL Server
3.
Installing filtering components on one or more machines
For Windows, see
Installing Web Security components
.
For Linux, see
Installing Web Security Components on Linux
.
For V-Series appliances, see
Installing appliance-based Websense solutions
.
Important
: Install Policy Broker, Policy Server, and Filtering Service or the full policy source appliance before installing other components.
During Filtering Service software installation (if applicable), be sure to specify that Filtering Service will be integrated with Websense Content Gateway.
4.
Installing Websense Content Gateway
5.
Creating a TRITON Management Server
Important
: When you reach the
Installation Type
screen, select both
Web Security
and
Data Security
under TRITON Unified Security Center.
Initial configuration
Websense TRITON Enterprise default ports
Excluding Websense files from antivirus scans
Initial Configuration for All Websense Modules
Web Security initial configuration
Using BCP for log record insertion with SQL Server 2008
Content Gateway initial configuration
Additional configuration for Web Security Gateway Anywhere
Installing Web Security solutions
> Installation overview: Web Security Gateway Anywhere
Copyright 2016 Forcepoint LLC. All rights reserved.