Better SSL clustering support

August 25, 2013, 7:51 am

≫ Next: Custom Block Page to email Helpdesk and include blocked link.

≪ Previous: Websense Web Security 7.7.3 with Squid 3.3 + ICAP on CentoS 6.4 // Authentication

$

0

0

When using a WCG cluster, only the SSL Master server can maintain the SSL incidents as the SSL clustering currently works different than the clustering of the other non-ssl configuration. This poses a problem in the following scenario. When clustering and using a PAC file or other means to distribute load among multiple WCG servers, it is possible that SSL incidents will be created on a WCG server that is not the primary source for SSL Configuration. One would have to manually copy this SSL incident to the primary SSL Master server to avoid the incident from getting over-written from the master SSL server.

So this feature request is to allow SSL incidents to be copied from non-SSL Master WCG servers to the master.

---

Custom Block Page to email Helpdesk and include blocked link.

August 26, 2013, 7:22 am

≫ Next: PEM 7.3 - upgrade issues

≪ Previous: Better SSL clustering support

$

0

0

Hey all;

I thought I read a post regarding this question in the past but I can't find it now.  I'm wondering if the Block Page can be modified to contain a link to our Service Desk that the user can click on (no problem) to email them with a request that contains the blocked link.

The blocked link is listed in the block page message, along with the reason for the block.  An issue our Service Desk has raised is that the users just close the block page then call with "I can't get here".  The issue is compounded when it's not the actual site they are visiting but rather an embedded link contained on the site.  Think Scribd or Slideshare as examples.

Thanks,

PEM 7.3 - upgrade issues

August 26, 2013, 8:10 am

≫ Next: Hybrid Configuration menu item disappeared

≪ Previous: Custom Block Page to email Helpdesk and include blocked link.

$

0

0

We are trying to upgrade our instance of PEM to 7.3.  We have already completed the upgrade of Email Security to 7.3

At the beginning of the install, we get the following errors:

"Error: invalid connection.  ConnectionOpen (Invalid Instance)"

I hit OK on that error and get the next error.

"PEM database does not meet minimum requirements"

PEM database is currently residing on a SQL Server 2005 instance.

Any ideas on this?

Hybrid Configuration menu item disappeared

August 27, 2013, 3:20 pm

≫ Next: Websense Reporting

≪ Previous: PEM 7.3 - upgrade issues

$

0

0

The "Hybrid Configuration" menu item has vanished from the menu. 

This is the second time it happened. The first time, I had to re-install some services to get it back. 

Has anybody seen this happen before? Any ideas on what might cause this? 

 

Running --->Unified Security Center build:7.7.3.11Web Security build:7.7.3.1147

 

 

Websense Reporting

August 28, 2013, 3:19 am

≫ Next: Remote filtering client install ver 7.7.3.1631

≪ Previous: Hybrid Configuration menu item disappeared

$

0

0

Hi,

Can anyone help me with this basic report I am trying to do.

Basically all I want is a report which will email me everymonth the total number of hits for that month and the same with blocked hits.

Is this possible as I cant seem to find a report which will help me do this.

Thanks

Remote filtering client install ver 7.7.3.1631

August 28, 2013, 5:46 am

≫ Next: Converted from ISA Server to TMG

≪ Previous: Websense Reporting

$

0

0

We are trying to deploy the remote filtering client ver 7.7.3.1631 to Win 7 systems using the following parameters,  /v"/quiet /norestart". The issue is that the client installs fine when it is run interactively, but when we install it with the above parameters, the client installs but the services will not start. We have UAC off. Anyone encounter a similar issue? Thanks

Converted from ISA Server to TMG

August 28, 2013, 9:35 am

≫ Next: HTTP Method report?

≪ Previous: Remote filtering client install ver 7.7.3.1631

$

0

0

We have had to convert from ISA server to TMG - We can not install existing Websense service components which were on the original ISA's onto these 64bit TMG's, only the "ISAPI Filter Plugin" can be installed as recommended!!!  The new TMG servers have been added in websense as secondary policy servers but report "no suite info" - and the Master Database appears not to be updating.  No filter traffic is visible as yet either.  Do we need to remove filtering service and reinstall in order for TMG to be integrated or are there configuration files in websense to allow this to be configured manually?  Any help greatly appreciated.

HTTP Method report?

August 28, 2013, 11:19 am

≫ Next: Referer URL in web logs

≪ Previous: Converted from ISA Server to TMG

$

0

0

is there a way in Triton investigative reports to do a HTTP method report?  for instance, we want to find out how much traffic for a site/source/destination was POST vs GET or some other method.  

 

we are using 7.7.3 btw.  

---

Referer URL in web logs

August 28, 2013, 11:50 am

≫ Next: Triton Policy server grouping

≪ Previous: HTTP Method report?

$

0

0

PLease add that to the user browsing logs, especially the ones that get sent to the SIEM.  its pretty important to know if the URL the user went to was through a referral and where that referral came from.  

 

Thank you.  

Triton Policy server grouping

August 28, 2013, 11:26 am

≫ Next: PEM login error

≪ Previous: Referer URL in web logs

$

0

0

Id like to be able to do an investigative report in Triton for a site (with multiple policy servers) rather than a bunch of single reports that have to be added up.  

PEM login error

August 28, 2013, 1:55 pm

≫ Next: Allow Embedded Training Video Content

≪ Previous: Triton Policy server grouping

$

0

0

Hello everyone,

Our costumer has a big issue and need urgent help, when users try to login in PEM portal they have to digit login and password several times. The communication with Triton is in C port but are in the same network segment 192.168.3.0/24. Have any ideas?

Thanks! 

Allow Embedded Training Video Content

August 27, 2013, 4:09 pm

≫ Next: Adding a additional custom list to a group (6.3.3)

≪ Previous: PEM login error

$

0

0

I need advice on how to unblock 'streaming media' content within a permitted web page. We use March Networks for video surveillance and they host online training videos at vimeo.com.

Using the 'Filter Components' I attempted to re-categorize the blocked videos as an allowed subcategory under 'User-Defined' called 'March Networks'. However, when accessing the page the content remains blocked.

This is the URL we are testing for access:

http://onlinetraining.marchnetworks.com/VisualIntelligence/EvidenceReviewer.aspx

Websense blocks the video at this URL:

http://vimeo.com/api/oembed.json?url=http://vimeo.com/58627089&width=770&callback=_jqjsp

When I add the previous URL as a 'Filter Component'. Websense then blocks this URL:

http://player.vimeo.com/video/58627089

When I add the previous URL as a 'Filter Component'. Websense then blocks a third URL:

http://a.vimeocdn.com/p/1.4.31/js/player.core.opt.js

I attempted to create a 'Regular Expression' as there are numerous training videos that need unblocked, but this method was unsuccessful.

I have a support ticket open, but any advice on how to address this would be appreciated.

Adding a additional custom list to a group (6.3.3)

August 28, 2013, 4:25 pm

≫ Next: "Exact Match" Fingerprint for Database Fingerprinting

≪ Previous: Allow Embedded Training Video Content

$

0

0

We currently have a user-defined 'category' list which covers all users. I want to create second list which we can specify sites allowed only to a particular AD group.

Thanks,

"Exact Match" Fingerprint for Database Fingerprinting

July 15, 2013, 2:11 pm

≫ Next: Forcing TLS to specific domains?

≪ Previous: Adding a additional custom list to a group (6.3.3)

$

0

0

Hello Guys,

When we work with File Fingerprinting we have the option to configure a "Exact Match" or "Content Similarity" fingerprinting task.

 

We don´t have this option for Database Fingerprinting, and i would like to suggest this feature on next releases.

 

use case: as an example, we have some costumer contact information that we want to monitor. This information consists of name, email and phone number.

Some false positives are being triggered on transactions involving numbers, and we had to disable that column from fingerprinting.

 

Forcing TLS to specific domains?

August 29, 2013, 7:51 am

≫ Next: one reporting request

≪ Previous: "Exact Match" Fingerprint for Database Fingerprinting

$

0

0

---

one reporting request

August 29, 2013, 3:57 am

≫ Next: Multiple Block pages for different users

≪ Previous: Forcing TLS to specific domains?

$

0

0

Hello

I would like to make a suggestion. When I look at the data usage reports, a report to a different need. I want to separate data usage reports for 3G and wifi for presentable reports to my boss. Could you add this reports on next version? that can be usefully for all companies who is on works with mobile IOS

thank you

Multiple Block pages for different users

February 26, 2009, 6:52 am

≫ Next: Websense 7.7 Install

≪ Previous: one reporting request

$

0

0

I am currently migrating users from SurfControl to Websense 7.0 and I'd like to know if I can create multiple Block Pages for different users.  I have a group of users that I want to block access completely too and present a block page with an acceptable use policy.  Other users would get a 'normal' block page depending on the site being blocked.

With Surfcontrol I was able to create multiple Block pages and assign them to individual disallow rules.

Thanks, Tony

Websense 7.7 Install

August 29, 2013, 10:43 am

≫ Next: Websense Web Cloud - BUG Endpoint authentication of user

≪ Previous: Multiple Block pages for different users

$

0

0

I just finished a successful Websense 7.7 install. This install is only on a local VM for practice and understanding. Here is what I did:

 

• Installed SQL Experss
• Installed Triton Infrastructure 
• DId a custom install of Web Security and added teh Policy Broker, Policy Server, and the Filtering Service
• Did a Custom install of User Service and the DC Agent

 

When I log on to the Triton Management console and click the Web Security button. The only thing there is an advertisement for Web Security  with a link that takes me here http://www.websense.com/content/web-security-gateway-features.aspx?cmpid=ProdConsoleGetWS. 

What am I missing?

Thanks

Websense Web Cloud - BUG Endpoint authentication of user

August 9, 2013, 1:54 am

≫ Next: New Sub-Category for the Information Technology Category

≪ Previous: Websense 7.7 Install

$

0

0

Hi,

I found out, that Endpoint assign a policy by chance if the user does not exist on the portal.

Expample:

ActiveDirectory User Peter exists on the protal and is assigned by group to the policy A.

Peter is logged in on the Windows-PC and everything is working. Endpoint get the correct policy and Peter is browsing over the correct policy A.

Now: on the pc there exists some default windows-services. Some Services try to connect to the internet. The services are runnind under a internal-OS-User like "system" or "Network". The Endpoint get in this way a policy by chance and modify so the PAC-File in the Browser. So if Peter is now brwosing, he browses over the wrong PAC-File and so with a wrong Policy!!!

Only if Peter open and closes the Browser, he will get back the correct Pac-File/Policy, which is assigned to his Windows-User.

Websense should prevent this autoregistrations by chance or prevent that internatl-OS-Users can register itself over the Endpoint.

I think this is a very critical issue! It could be, that users get in this way a policy where nothing is blocked!!

A internal-OS-User looks then in this way on the protal:

nt authority|system.local

nt authority.system.local@35719-31068-nosuchdomain.autoregistration.proxy

nt authority\system.local

 

Bye

New Sub-Category for the Information Technology Category

October 29, 2012, 9:24 am

≫ Next: Servers are using up our Websense user license amount of users

≪ Previous: Websense Web Cloud - BUG Endpoint authentication of user

$

0

0

I hope that this is the correct place to request an additional sub-category.  For Compliance reasons my site is required to block email marketing sites such as www.constantcontact.com and   www.icontcact.com.  Periodically requests are approved to allow temporary access to URLs in these domains.  Since the domains are filtered via a User Defined Category I am unable to grant access just to the specific URL.  I would like to recommend a sub-category 'Email Marketing' as part of the 'Information Technology' category to be able to filter these sites more efficiently.