Installing a Web Protection Solution

Topic 51122 | Release Notes | TRITON AP-WEB | 02-Feb-2015

Requirements overview

Installation overview

Downloading the installer

Upgrade overview

Installation and upgrade tools and references

Requirements overview

Except for the components listed immediately below, all web protection components can run on the following operating systems:

Microsoft Windows Server 2008 R2, 2008 R2 SP1, 2012, or 2012 R2


	Important Before installing any components, make sure that .NET Framework 3.5 is installed on the machine.

Red Hat Enterprise Linux 6.x(64-bit)

The following components run on Windows platforms only:

The following component runs on Linux 6.x platforms or Websense appliances only:

Content Gateway

In appliance-based deployments, in addition to the Windows-only components, the following components, when used, must be installed off-appliance:

Sync Service

Transparent identification agents (eDirectory Agent, Logon Agent, RADIUS Agent)

To enable web reporting tools, use one of the following certified database engines:

Microsoft SQL Server 2012 SP2 (or the latest service pack from Microsoft) Standard, Business Intelligence, or Enterprise

Important

SQL Server 2012 uses a different security model than previous versions. To successfully create the Log Database in SQL Server 2012, you must either:

Install the database in the default SQL Server folder.

Grant the database engine full control over the folder that will host the database before you install Log Server.

Microsoft SQL Server 2008 SP3 (or the latest service pack from Microsoft) Standard or Enterprise

Microsoft SQL Server 2008 R2 SP2 (or the latest service pack from Microsoft) Standard or Enterprise

For very small networks and evaluation environments, SQL Server 2008 R2 Express SP 2 (packaged in the TRITON Unified Installer).

See System requirements for this version in the Deployment and Installation Center for detailed hardware and software requirements.

Installation overview

The number of steps required to install your software depends on the hardware platforms used in your environment, the size of your network, and how widely you plan to deploy components.

The Websense Deployment and Installation Center is the complete resource for deployment, installation, and upgrade information for version 8.0 TRITON Enterprise solutions.

As a best practice, for software component installation, log in as a domain and local administrator to run the installer.

See Downloading the installer for information on where to get the installation package you need.

TRITON AP-WEB

For a typical TRITON AP-WEB software deployment, expect to run the TRITON Unified Installer, the Content Gateway Linux installer, and, if needed, the Web Linux installer. A typical deployment will include at least 4 machines:

Use the TRITON Unified Installer or Web Linux Installer to perform a Custom installation for core filtering components (Policy Broker, Policy Server, Filtering Service, Network Agent, User Service, Usage Monitor) on a supported Windows or Linux machine.

Use the TRITON Unified Installer to perform a TRITON Manager > Web module installation to install core management components and reporting tools on a supported Windows machine.

Installing the TRITON Manager requires Microsoft SQL Server. If an existing SQL Server instance is not available, SQL Server 2008 R2 SP2 Express is installed.

Use the TRITON Unified Installer to perform a Custom > TRITON AP-WEB installation of Log Server on a supported Windows machine.

Use the Content Gateway Linux installer to install Content Gateway on a Linux server. No other Websense web protection components can reside on this machine.

Content Gateway

Content Gateway is installed in /opt/WCG, and files are installed with root ownership. Content Gateway processes are run as root.

The Content Gateway host computer should have Internet connectivity before you start the installation. Analytic databases cannot be downloaded from the Websense Database Download Server until Internet connectivity is available.

A full deployment of Content Gateway requires that several ports be open. See Content Gateway Deployment Issues in the Deployment and Installation Center for information about open ports and the reassignment of ports, if necessary.

The password you enter for the Content Gateway administrator during installation (default name: admin) must be 15 characters or fewer.

The password cannot contain spaces or the following special characters:

$ (dollar symbol)

: (colon)

' (backtick; typically shares a key with tilde, ~)

\ (backslash)

" (double-quote)

When Content Gateway and TRITON AP-DATA are deployed together and any of the following file types are used, you must apply Content Gateway v8.0 Hotfix 1. If you do not, files of these types are not detected by Content Gateway.

JT Assembly File

PRO/Engineer Format (.drw)

STL CAD binary format

PRO/Engineer Format (.asm)

PRO/Engineer Format (.prt)

PRO/Engineer Format (.frm)

To obtain the hotfix, visit MyWebsense.com, select TRITON AP-WEB v8.0, and then select "v8.0.0 HF 01 WCG Failed to Detect AP-DATA File Types".

TRITON AP-WEB on an appliance

A simple TRITON AP-WEB appliance deployment requires you to:

Run the firstboot script and configure the full policy source appliance.

Content Gateway is automatically included on the appliance.

Download the TRITON Unified Installer (WebsenseTRITON80Setup.exe).

Run the installer on a Windows Server 2008 R2, 2008 R2 SP1, 2012, or 2012 R2 machine.

Select the TRITON Manager radio button, and the Web module check box beneath it.

Installing the TRITON Manager requires Microsoft SQL Server. If an existing SQL Server instance is not available, SQL Server 2008 R2 SP2 Express is installed.

Run the TRITON Unified Installer again (on the TRITON Management Server or another machine) and select Custom, then TRITON AP-WEB to install off-appliance components that are not part of the TRITON console, like transparent identification agents.

Start-to-finish installation instructions covering most typical deployments are available in PDF format:

Installation Instructions: TRITON AP-WEB

Downloading the installer

The same installers are used for both fresh installations and upgrades. To download the TRITON Unified Installer, Web Linux Installer, or Content Gateway Installer:

Go to mywebsense.com and log in to your account.

You are taken to the My Products and Subscriptions page.

Click the Downloads tab.

Under Download Product Installers, select your Product and Version (8.0).

The available installers are listed under the form.

Click the plus sign ("+") next to an installer entry for more information about the installer.

Click the download link to download the installer.

Note that the TRITON Unified Installer is very large (approximately 1.6 GB), so if you have a slower network connection, it may take some time to download.


	Note If Content Gateway is running on a V-Series appliance, it is installed during factory imaging and upgraded when the v8.0 patch is applied. You do not need to download the installer.

Upgrade overview


	Important V-Series appliance users: Some older V10000 and appliances are not supported with version 8.0.0 and higher. See V-Series appliances supported with version 8.0.

See Downloading the installer for information on where to get the installation package you need for the upgrade. The same package is used for upgrades as well as fresh installations.

To upgrade to TRITON AP-WEB version 8.0:

Websense TRITON Web Security Gateway or Web Security Gateway Anywhere deployments must be at version 7.8.x.

Note that hotfix 94 must be applied to v7.7.x prior to upgrading Content Gateway (software or appliance) to v7.8.x. This retains the default Sync Mode setting between v7.7.x and v7.8.x and then from v7.8.x to v8.0.x. Retaining sync mode can prevent latency sometimes caused by async scanning.

All components that you want to upgrade (rather than install separately after core components are upgraded) must be on a supported operating system. This may require:

Reinstalling your existing version of Policy Broker and Policy Server on a platform supported in v8.0.

Migrating policy and configuration settings to the new installation on the new platform. (See Migrating web protection management components.)

Running the upgrade process.

If you are using a version of Microsoft SQL Server prior to 2008, upgrade the database to a certified version.

When you upgrade Content Gateway from 7.7.x to 7.8.x, in preparation for upgrading to v8.0.x, customized error message pages are lost. Record your customizations in advance and be prepared to reapply them after upgrade.

If upgrading Content Gateway from a version prior to 7.8.2, if both of the following are true, domain names will be logged after upgrade:

Allow Query Destination has been enabled.

IP addresses are being logged.