Endpoint and Remote Filtering Client Tips for version 7.6 : Deploying Web and Data Endpoints

Deploying Web and Data Endpoints

Topic 45029 / Updated: 23-June-2011

Applies To:

Websense Data Security 7.6 Websense Web Security Gateway Anywhere 7.6 Websense Hosted Web Security 7.6

If you try to install Web Endpoint on a machine where Data Endpoint is already installed, the installation process will not work. To deploy both endpoints on a single machine, first uninstall the Data Endpoint, then follow the instructions below to deploy a joint installation package.

 

Note  The Web and Data Endpoints can only be deployed together on Windows operating systems.

1.	Contact your Sales, Support, or other Websense representative to obtain a joint Web and data endpoint package.

2.	Unzip the contents of the installation package to a location of your choice. The directory contents will look similar to this:

3.	From this directory, open localConfig.xml in a text editor.

4.	Find the section

<URL>

<!-- WISEMETA: default="https://[IPADDRESS]/EP/EndpointServer.dll"-->

http://127.0.0.1/EP/EndpointServer.dll

</URL>

 

In this section:

a.	Remove the commented section <!-- WISEMETA: default="https://[IPADDRESS]/EP/EndpointServer.dll"-->

b.	Replace the 127.0.0.1 IP address with the IP or host name of the Data Security server that you want the Data Endpoint to connect to. We recommend you use HTTPS for this connection.

The section should now look similar to this:

<URL>https://10.0.19.160/EP/EndpointServer.dll</URL>

10.0.19.160 in this example represents the IP address of your Data Security server.

5.	Save and close localConfig.xml.

6.	You can now deploy this installation package using your preferred distribution method.

Each deployment system has its own requirements and functionality. The .msi should be deployed using the following command:

msiexec /package "Websense Endpoint.msi" /quiet /forcerestart WSCONTEXT=xxxxxx

WSCONTEXT=xxxxxx is the unique code for your Web Endpoint, noted from the Hybrid User Identification page in TRITON - Web Security, or from the Endpoint download page in Hosted Web Security. The code is required during installation to associate the endpoint with your customer account and enable your end users to log on transparently.

In order for both endpoints to be "active" on the user's computer, the computer must restart.

You can install the endpoints manually on a single machine by opening a command-line window, navigating to the location of the unzipped endpoint files, and running the above command. Alternatively you can deploy the joint endpoint package via an Active Directory group policy object:

1.	Create a shared folder (create a folder and turn on sharing in the Properties menu).

2.	Create a batch file (.bat) in the shared folder, for example "installmsi.bat". This can be done in any text editor. The batch file will contain a login script to enable the endpoints to be installed via GPO.

Below is an example of a login script:

msiexec /package "\\path\Websense Endpoint.msi" /quiet /forcerestart WSCONTEXT=xxxxxx

Where path is the path to the joint Web and Data Endpoint installer.

3.	Test your batch file manually to make sure it runs on other workstations. You can do this by opening the server path to the file on a workstation and attempting to run the file. If the file does not run, check your permissions.

4.	Open the Group Policy Management Console (GPMC).

5.	Create a new (or open an existing) GPO on the organization unit (OU) in which your computer accounts reside. To create a new GPO:

a.	In the console tree, right-click Group Policy Objects in the forest and domain in which you want to create a Group Policy object (GPO).

b.	Click New.

c.	In the New GPO dialog box, specify a name for the new GPO, and then click OK.

6.	Right click on the name of your new GPO and select Edit.

7.	In the editor window, open User Configurations > Windows Settings > Scripts, and double-click Logon in the right pane of the screen.

8.	Click Add.

9.	In the Script Name field type the full network path and filename of the script batch file you created in step 2.

10.

Click OK.

11.	Link the new GPO to selected OUs, or to the whole domain, by right-clicking an OU or the domain and selecting Link an existing GPO.

12.	Select your GPO script and click OK.

13.	Expand the OU and right-click the shortcut to your GPO script. Select Enforced. This ensures that any domain user belonging to the selected OU will automatically run this script during system login.

14.	Close the GPMC.

You can confirm that the Web and Data Endpoints are installed and running on a machine as follows:

For Web Endpoint, go to Start > Control Panel > Administrative Tools > Services. Check that "Websense SaaS Service" is present in the Services list, and is started.

When the Data Endpoint is installed, an icon appears on the endpoint machine's task bar. Click this icon for status information.

For more information on Web Endpoint, see Setting up Web Endpoint in the Hosted Web Security Getting Started Guide, and Deploying Web Endpoint in the TRITON - Web Security Help.

For more information on Data Endpoint, see Configuring Endpoint Deployment in the TRITON - Data Security Help.

Endpoint and Remote Filtering Client Tips for version 7.6 : Deploying Web and Data Endpoints