Technical Library | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Configuration Files > records.config > Connectivity, analysis, and boundary conditions
Connectivity, analysis, and boundary conditions
Help | Content Gateway | Version 8.1.x
 
Configuration Variable
Data Type
Default Value
Description
wtg.config.
subscription_key
STRING
NULL
Holds the TRITON AP-WEB subscription key value.
wtg.config.
download_server_ip
STRING
download.
websense.com
Holds the hostname or IP address of the Websense download server.
wtg.config.
download_server_port
INT
80
Holds the port number of the Websense download server.
wtg.config.
policy_server_ip
STRING
 
Holds the IP address of the Websense Policy Server.
wtg.config.
policy_server_port
INT
55806
Holds the port number of the Websense Policy Server.
wtg.config.wse_server_ip
STRING
 
Holds the IP address of the Websense Filtering Service.
wtg.config.
wse_server_port
INT
15868
Holds the port number of the Websense Filtering Service WISP interface.
wtg.config.wse_server_
timeout
INT
5000
Specifies the maximum length of time, in milliseconds, for communication with Filtering Service.
wtg.config.
ssl_bypassed_categories
STRING
NULL
This variable takes a list of category identifiers that will bypass SSL decryption.
Do not change the value of this variable. It is included strictly as a troubleshooting aid.
Use the Web module of the TRITON Manager to specify categories to bypass SSL decryption.
wtg.config.
ssl_decryption_bypass_
ip_based
INT
0
Specifies that the SSL category bypass process use only the IP address (not the hostname) when performing a category lookup.
0 = disabled
1 = enabled
wtg.config.ssl_fail_open
INT
1
Specifies whether SSL sites are decrypted if Filtering Service becomes unreachable.
0 = disable – causes all SSL sites to be decrypted when Filtering Service is unreachable.
1 = enable – causes all SSL sites not to be decrypted when Filtering Service is unreachable
wtg.config.fail_open
INT
1
Specifies whether Content Gateway will permit or block the request when Websense Web filtering (Filtering Service) is unavailable.
Set to:
*
0 to send a block page
*
1 to permit the request
wtg.config.
fail_open_analytic_scan
 
INT
1
Specifies how Content Gateway behaves should analytic scanning become non-functional.
Set to:
*
0 to block traffic
*
1 to perform a lookup in the URL master database and apply policy
Note: An alarm is raised whenever analytics scanning becomes non-functional.
wtg.config.archive_depth
INT
5
Specifies the maximum depth of analysis performed on archive files.
wtg.config.
max_decompressions
INT
10
Specifies the maximum number of total decompressions to be performed on archive files (per transaction). The value should not exceed 25.
wtg.config.
max_subsamples
INT
10000
Specifies the maximum number of discrete files within an archive file that Content Gateway may decompress and analyze to classify a given transaction.
wtg.config.
zipbomb_action
INT
1
For internal use. Indicates zip bomb analysis status.
Do not change the value of this variable.
wtg.config.
max_mem_allowed
INT
1500
Specifies in megabytes, the maximum amount of memory, which when consumed, causes Content Gateway to perform more extensive memory monitoring.
wtg.config.lowmem_
behavior
INT
0
Enables (1) or disables (0) bypass of scanning, but still filters.
wtg.config.lowmem_
timeout
INT
120
Timeout value (in minutes) for the low-memory management. After that time, resets to "no management".
wtg.config.rdnsclients
INT
0
Enables (1) or disables (0) logging of clients' hostnames in the log records by doing reverse DNS on each.
wtg.config.
ip_ranges_not_to_scan
STRING
10.0.0.0-10.255.255.255,
172.16.0.0-172.31.255.255,
192.168.0.0-192.168.255.255
Specifies internal IP address ranges not to scan. By default, the list is the standard private non-routable IP addresses. Address ranges are hyphenated with each range separated by a comma.
This is especially helpful in explicit proxy deployments in which a PAC file is not used and you want to exclude the standard internal IP addresses from being scanned.
wtg.config.
scan_ip_ranges
INT
1
Enables (1) or disables (0) bypass of the internal IP address ranges specified in wtg.config.
ip_ranges_not_to_scan. See above.
wtg.config.feedback.
enabled
INT
1
Enables (1) or disables (0) analytic/category feedback to Websense.
Set at install time.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Configuration Files > records.config > Connectivity, analysis, and boundary conditions
Copyright 2016 Forcepoint LLC. All rights reserved.