Exceptions

October 7, 2014, 9:19 am

≫ Next: How 2 schedule user detail report

≪ Previous: Lync 2013 authentication prompt by Hybrid Cloud

$

0

0

I created an exception for 4 people for a specific website.  The can go to the website but it is not displaying correctly.   Images are not being loaded, some of the text is not being displayed correctly, etc.  I believe this is a websense issue because on my PC the site loads fine and if I login to one of the machines as myself I can get into the site fine.  How can I fix this?  I have type: permit Expires:never and the State is Active.  Under Advanced option I have Block URLs that become a security risk:Unchecked.

 

---

How 2 schedule user detail report

October 7, 2014, 12:08 pm

≫ Next: Add SFTP in File Transfer Filter

≪ Previous: Exceptions

$

0

0

I can't seem to find a way to schedule a report. The report I need is for 10 specific users and in their reports I would like to get what URL's they were permitted to and what time the URL request occurred. I would also like to be able to schedule this report to run on every Monday morning for the previous week.

The investigative report "User detail by day" has the exact data I'm looking for. But I don't see anyway to claim this as a favorite so that I can schedule it. Is there something I'm not seeing or is this a bug?

I am on TRITON version 7.8.1.

Thank you

Add SFTP in File Transfer Filter

October 8, 2014, 12:01 am

≫ Next: Websense 7.8.4 Upgrade Cannot Stop Remote Filtering Client Pack

≪ Previous: How 2 schedule user detail report

$

0

0

The protocol filter file transfer needs to include SFTP.

Websense 7.8.4 Upgrade Cannot Stop Remote Filtering Client Pack

October 8, 2014, 2:37 am

≫ Next: Websense Web Security Gateway - Application Control for Dropbox

≪ Previous: Add SFTP in File Transfer Filter

$

0

0

we have an Installation of Websense Web Security 7.8.3.1295 on a 2008R2 Server which has the following Components installed:

Remote Filtering Client Pack

Remote Filtering Server

now i am trying to upgrade to 7.8.4.1390 when running the installer i am presented with an error that the installed could not stop the Remote Filtering Client Pack Service, This service does not exist. Running services.msc i can see the only Websense services are:

Websense Control Service

Websense Remote Filtering Service

Both of these are stopped there are no Websense processes running other than the 2 installers, yet i still receive the error and i cannot proceed any further.

Websense Web Security Gateway - Application Control for Dropbox

October 8, 2014, 3:51 am

≫ Next: User Detail Report

≪ Previous: Websense 7.8.4 Upgrade Cannot Stop Remote Filtering Client Pack

$

0

0

I would like an application control to be built to be able to control downloading, sharing, and uploading files through Dropbox.

User Detail Report

October 8, 2014, 9:02 am

≫ Next: XID User Map showing IP addresses in reverse

≪ Previous: Websense Web Security Gateway - Application Control for Dropbox

$

0

0

I am trying to create a report for a user. It needs to be custom date range, by browsing time, with the urls listed. So basically list all of the urls for a user per day with the time spent on the site. How can I go about doing this no luck so far.

XID User Map showing IP addresses in reverse

October 8, 2014, 11:34 am

≫ Next: Office 365 Login Issues

≪ Previous: User Detail Report

$

0

0

Has anyone seen this before? We are having some problems some users on thin clients aren't being logged by username, but within their citrix sessions they are.

IP addresses in bold are being reported in reverse order, which makes no sense. the rest of the IPs in the list are normal and are fine. 

Websense Support attributes this to a network issue; which i completely disagree with considering many computers within the same subnets are showing correctly in log and seem to get reported correctly.

They suspect it's a Reverse DNS issue, but I don't buy it.

 

The XID User Map shows this:

Number of entries in map is : 135

IP : 101.109.168.192 User: DOMAIN\tjk Timeout: 10-09-2014 06:38:00.0 Timestamp: 10-08-2014 06:38:00.0 Agent type: DC

IP : 102.109.168.192 User: DOMAIN\bfa Timeout: 10-09-2014 08:14:53.0 Timestamp: 10-08-2014 08:14:53.0 Agent type: DC

IP : 104.109.168.192 User: DOMAIN\rcs Timeout: 10-09-2014 10:00:30.0 Timestamp: 10-08-2014 10:00:30.0 Agent type: DC

IP : 105.106.168.192 User: DOMAIN\jed Timeout: 10-09-2014 07:03:13.0 Timestamp: 10-08-2014 07:03:13.0 Agent type: DC

IP : 105.109.168.192 User: DOMAIN\arg Timeout: 10-08-2014 14:18:20.0 Timestamp: 10-07-2014 14:18:20.0 Agent type: DC

IP : 106.111.168.192 User: DOMAIN\kralwhse Timeout: 10-09-2014 07:59:34.0 Timestamp: 10-08-2014 07:59:34.0 Agent type: DC

IP : 107.111.168.192 User: DOMAIN\neg Timeout: 10-09-2014 09:13:08.0 Timestamp: 10-08-2014 09:13:08.0 Agent type: DC

IP : 110.111.168.192 User: DOMAIN\rks Timeout: 10-09-2014 08:17:40.0 Timestamp: 10-08-2014 08:17:40.0 Agent type: DC

IP : 111.106.168.192 User: DOMAIN\shf Timeout: 10-09-2014 07:09:55.0 Timestamp: 10-08-2014 07:09:55.0 Agent type: DC

IP : 135.106.168.192 User: DOMAIN\mta Timeout: 10-09-2014 09:38:03.0 Timestamp: 10-08-2014 09:38:03.0 Agent type: DC

Office 365 Login Issues

October 8, 2014, 12:57 pm

≫ Next: Web Endpoint & Windows 8 and 8.1

≪ Previous: XID User Map showing IP addresses in reverse

$

0

0

I have a policy that applies to 3 servers. This policy uses a Limited Access Filter with specific sites.  Since we've migrated to Office 365 and use SharePoint online the users on these servers have no access to the external sharepoint site.  I've added many URL's that i thought would help fix this but nothing is working. 

 

Anybody have this type of issue?

---

Web Endpoint & Windows 8 and 8.1

October 29, 2013, 3:38 pm

≫ Next: User Detail Report

≪ Previous: Office 365 Login Issues

$

0

0

I find that in my Cloud Web Security portal that version 1145 is the most recent version available (1.4.7.6.1145) and the Release Notes do not mention explicitly supporting Windows 8 or 8.1 (but there is a mention that "…endpoint does not support Windows 8 Metro apps…")  Which seems to indicate that there may be some level of support on Windows 8.

Page 3 of 1145 Release notes do explicitly note:

Supported operating systems

 Windows XP with Service Pack 2 or higher (32-bit and 64-bit)

  Windows Vista with Service Pack 1 or higher (32-bit and 64-bit)

  Windows 7 (32-bit and 64-bit)

My question is are there folks out there with 8 or more specifically 8.1 running with Web endpoint?

 

thanks

User Detail Report

October 8, 2014, 9:02 am

≫ Next: Excluded servers still consuming subscription seats

≪ Previous: Web Endpoint & Windows 8 and 8.1

$

0

0

I am trying to create a report for a user. It needs to be custom date range, by browsing time, with the urls listed. So basically list all of the urls for a user per day with the time spent on the site. How can I go about doing this no luck so far.

Excluded servers still consuming subscription seats

October 9, 2014, 6:05 am

≫ Next: More Granular control of Exception handling

≪ Previous: User Detail Report

$

0

0

I have a new websense install that's integrated with a Cisco ASA.  I've excluded the servers from HTTTP/S filtering in the cisco:

filter https except 192.168.100.0 255.255.255.128 0.0.0.0 0.0.0.0 allow
filter https except 192.168.100.205 255.255.255.255 0.0.0.0 0.0.0.0 allow
filter https except 192.168.100.207 255.255.255.255 0.0.0.0 0.0.0.0 allow
filter https except 192.168.100.210 255.255.255.255 0.0.0.0 0.0.0.0 allow
filter https except 192.168.100.206 255.255.255.255 0.0.0.0 0.0.0.0 allow
filter https except 192.168.100.209 255.255.255.255 0.0.0.0 0.0.0.0 allow
filter https except 192.168.100.204 255.255.255.255 0.0.0.0 0.0.0.0 allow
filter https except 192.168.100.208 255.255.255.255 0.0.0.0 0.0.0.0 allow
filter https except 192.168.100.202 255.255.255.255 0.0.0.0 0.0.0.0 allow
filter https except 192.168.100.203 255.255.255.255 0.0.0.0 0.0.0.0 allow
filter https except 192.168.100.201 255.255.255.255 0.0.0.0 0.0.0.0 allow
filter https except 192.168.100.170 255.255.255.255 0.0.0.0 0.0.0.0 allow
filter url except 192.168.100.202 255.255.255.255 0.0.0.0 0.0.0.0 allow proxy-block longurl-truncate cgi-truncate
filter url except 192.168.100.208 255.255.255.255 0.0.0.0 0.0.0.0 allow proxy-block cgi-truncate
filter url except 192.168.100.206 255.255.255.255 0.0.0.0 0.0.0.0 allow proxy-block cgi-truncate
filter url except 192.168.100.207 255.255.255.255 0.0.0.0 0.0.0.0 allow proxy-block cgi-truncate
filter url except 192.168.100.204 255.255.255.255 0.0.0.0 0.0.0.0 allow proxy-block cgi-truncate
filter url except 192.168.100.209 255.255.255.255 0.0.0.0 0.0.0.0 allow proxy-block cgi-truncate
filter url except 192.168.100.205 255.255.255.255 0.0.0.0 0.0.0.0 allow proxy-block cgi-truncate
filter url except 192.168.100.203 255.255.255.255 0.0.0.0 0.0.0.0 allow proxy-block longurl-truncate cgi-truncate
filter url except 192.168.100.201 255.255.255.255 0.0.0.0 0.0.0.0 allow proxy-block longurl-truncate
filter url except 192.168.100.210 255.255.255.255 0.0.0.0 0.0.0.0 allow proxy-block cgi-truncate
filter url except 192.168.100.170 255.255.255.255 0.0.0.0 0.0.0.0 longurl-truncate
filter url http 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 allow proxy-block longurl-deny
filter https 443 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 allow

 

I've also excluded them in the Network Agent setup page, but when I look at the Subscription Tracker they're listed as consuming a license (edited to just show the problem servers):

----------------------------------------------------------------------
Subscription Tracker - PrintSelf - Level: 3
Time: Wed Oct 08 15:58:32.446 2014
----------------------------------------------------------------------

  Subscription Map Contents:
...  192.168.100.170  192.168.100.202  192.168.100.203  192.168.100.205
  192.168.100.214 ...

How do I correct this?

More Granular control of Exception handling

October 9, 2014, 12:25 pm

≫ Next: DC Agent not able to see domain controllers

≪ Previous: Excluded servers still consuming subscription seats

$

0

0

With 7.8.2 of ESG, one can turn of the delivery of an email based on the type of exception, however choosing to put a message in a queue and sending a notification is across all the different types of exceptions. It would be useful to be able to choose per exception type whether a message should be saved to a queue and also the name of the queue. Customizing the notification based on the exception type would also be useful.

Use Case:

For exceptions caused by the Antivirus scan, do not deliver message, save in the "AVExceptions" queue and send a notification to ESG administrator.

For exceptions caused by DLP scan, deliver the message, save in the "DLP exceptions" queue and send a notification to the DLP administrator.

DC Agent not able to see domain controllers

October 9, 2014, 8:48 am

≫ Next: Blocking of Ultrasurf

≪ Previous: More Granular control of Exception handling

$

0

0

Server OS:  Windows 2008 R2 sp1 (Hyper-V guest)

Websense:  7.8.4

I'm having a heckuva time trying to get transparent filtering working on a fresh Websense Web Security install.

When I configure Settings > Directory Services for "Windows Active Directory (mixed mode)" and then try to expand "Directory Entries" in Clients > Add Clients I get the following error:
"Error communicating with the directory server. Go to Settings > Directory Services to verify your configuration. Also, make sure the directory server is running, and verify the network connection."

In my event log I get the following error:
"0x1488000: EnumerateResource() got error 1208 from call to WNetOpenEnumW(). For resource Microsoft Windows Network. Extended error description The list of servers for this workgroup is not currently available . Provider Microsoft Windows Network."
I know it says "for this workgroup" but the server is attached to the domain.

The "Websense DC agent" service is configured with a Domain Admin account.  I've also tried my personal account and the enterprise administrator account to no avail.

This is especially bizarre because the Triton console is able to query AD just fine for administrator authentication.

Tangentially, we have our old Websense 7.1 server installed on an actual Domain Controller and it's able to transparently filter via AD.

Does the DC Agent need to be installed on the DC itself or something?

Blocking of Ultrasurf

March 23, 2010, 9:29 pm

≫ Next: Websense Cloud Web Security Dashboard - Remove Usernames from Display

≪ Previous: DC Agent not able to see domain controllers

$

0

0

is it possible to block the ultrasurf through websene ?

Websense Cloud Web Security Dashboard - Remove Usernames from Display

October 10, 2014, 4:38 am

≫ Next: How to change Sender name - Mailer Deamon

≪ Previous: Blocking of Ultrasurf

$

0

0

We would like to request the ability to customise the Dashboard so we can remove any user identifiable information from appearing in the dashboard for certain contacts.

---

How to change Sender name - Mailer Deamon

September 29, 2014, 5:59 am

≫ Next: Extend the data sent information

≪ Previous: Websense Cloud Web Security Dashboard - Remove Usernames from Display

$

0

0

We're getting notification e-mail FROM:MAILER-DEAMON, 
"Delivery has failed to these recipients or groups" 

How to change "MAILER_DEAMON" to the another address 

What is the procedure of this? 

Extend the data sent information

October 12, 2014, 4:15 am

≫ Next: custom certificate for Triton Manager URL

≪ Previous: How to change Sender name - Mailer Deamon

$

0

0

kindly we need to know the possibility of extend the data sent information in message center from last 30 days to 90 days  for tracking purposes.

Thanks

custom certificate for Triton Manager URL

October 12, 2014, 5:25 am

≫ Next: Additional Anti-virus engines

≪ Previous: Extend the data sent information

$

0

0

Hi,

 

We have Websense web security software 7.8.3 installed in Windows Environment.

We need to change the default URL certificate with our own CA signed. 

I have gone through few docs but they are not for ver 7.8.3, Can anyone help us. 

Additional Anti-virus engines

October 7, 2014, 1:51 am

≫ Next: Difference between pgsetup and wsbackup

≪ Previous: custom certificate for Triton Manager URL

$

0

0

We would like to ability to select additional anti-virus engines in ESG.

Difference between pgsetup and wsbackup

January 10, 2011, 6:11 am

≫ Next: Subscription for End user message reports expire every 90 days

≪ Previous: Additional Anti-virus engines

$

0

0

Hello,

As I will have an WSG upgrade from v7.1 to v7.5, may I know what's difference between pgsetup and wsbackup utility? As I know, both commands are using backup the configuration, but what is the actually difference? Thanks.