Quantcast
Channel: Forcepoint Community
Viewing all 2011 articles
Browse latest View live
↧

Can't figure this one out

March 28, 2013, 4:38 am
$
0
0

I'm not really sure what's going on with this, but every morning when my users arrive I get an absolute flood of the following alert emails.  I cannot figure out where these might be coming from. Anyone seen this before? It looks like it must be coming from an embedded ad somewhere, or just miscategorized perhaps.

Date: Thu 28 Mar 2013 06:29:35 AM CDT
Type: Information
Source: Websense Usage Monitor

 

A client has exceeded a configured daily Internet usage threshold.

For more information, run investigative or presentation reports in TRITON - Web Security. See the TRITON - Web Security Help system for details.

User name: LDAP://10.101.1.52 OU=Users,OU=Users,DC=mydomain,DC=local/Joe Username User IP address: 10.122.98.198 Threshold (in visits): 20

Category: Illegal or Questionable
Action: Blocked

--Most recent request--
URL: HTTPS://64.145.84.56:443
IP address: 64.145.84.56
Port: 443

 

↧
Search

Header and footer detection in pdf files

December 17, 2013, 5:45 am
$
0
0

There are a Content classifier which named "Text in HeaderFooter". This is a script which is for the detection of phrases in the Header or footer field.

For Word or Excel it work fine, but not for pdf files.

The Support explain that websense (today) is not able to detect this in PDF files.

Other technologies such as HP Autonomy are able to detect footers in PDF hence I assume there’s a way to achieve this (e.g. specific PDF tags? based on the proximity between a specific keyword and the bottom of page?).

It would be very helpful if websense provide a way to detect these Header footer detection in PDF Files.

Regards Christian  

↧
↧

Enforce strong passwords for local users

December 17, 2013, 6:52 am
$
0
0

Hello,

It make sense, that a setting exist to enforce a strong Password policy for local accounts.

If a customer has no RSA Server but wont to enforce a strong Password policy there is today no possibility.

To use a Active Directory Account is not a good Option if the Role of the DLP Admin should be separated from the Domain admin role.

 

So it would be great to provide a way to enforce a password policy for local user accounts.

Regards Christian

 

↧

Block page coming from wrong network agent

December 17, 2013, 7:23 am
$
0
0

I am running Websense 7.7 with two Network Agent servers.  One is on our primary network, and the other is on the secondary (failover) network.  I recently had to change the IP's for the secondary network server.  I have filtering working fine, and I have specified the right NIC to serve up the block pages.  But when we try to open a blocked site, we get the block page from the primary Network Agent.  In other words, the secondary Network Agent is doing the filtering, but the URL for the block page shows the primary Network Agent IP.  Does anyone have any idea what is causing this?  Thanks.

↧

User is identified properly but content is still being blocked

October 7, 2013, 12:07 pm
$
0
0

I have an odd issue that has been popping up off and on for a week or two but doesn't seem to affect everyone (or they aren't reporting it, not sure which). I have had this happen to me specifically as well, so I know I'm not just getting false reports from users. I am running Websense Web Security v7.6.5.

I have a "Managers" and an "IT" filtering group with varying levels of access. Randomly, Websense will decide to block a site for someone in a less restricted group; in this case Facebook for one of the managers that is in the Managers group and updates our company Facebook page.

When you check his user name on the Triton control panel, it correctly pulls up the user as associated with the "Managers" filtering policy. When you check his user name and www.facebook.com for a filtering check, it also pulls up correctly and says that the site should be allowed under the "Managers" policy.

I hop over to the real time monitor on the local server and it shows the HTTPS traffic IP address as allowed, then the URL www.facebook.com is blocked. Upon checking the local site policy server, it does not recognize that this user is a member of the "Managers" group and is lumping him in with the Default policy.

I can typically clear the "Directory Services" cache under Settings --> General --> Directory Services and it will rebuild and be functional again in about 15 minutes or so, but this should not be necessary. Any help that can be provided would be appreciated.

*** I have two sites, each running a server in stand-alone mode, policy broker, logging server, and logging database are at one site. I have a Domain Controller at each location (identical operating systems - server 2012) local to each policy server for the directory agent to poll. Policy Broker server is Server 2008 R2, secondary server is Server 2003 R2.

↧
↧

Missing 10 months DBs

December 17, 2013, 9:36 pm
$
0
0

Dear Support,

I was checking the settings on Triton, I was surprised that i'm missing about 10 DBs. when I check on DB server, those databases where deleted last month. Can you help us to identify the issue and how to rectify it?

 

Regards

↧

Deployment failure message can display more detailed information

December 18, 2013, 8:04 pm
$
0
0

My customer occurs deploy failure, but it messages is very few on deployment process screen. It only display "Not Deployed", the messages cannot understand it is disconnected or other failure. Can it can display more information on deployment process screen.

↧

Websense version 6.3.3 (can't upgrade) Filtering service will not start.

December 18, 2013, 4:10 pm
$
0
0

I restarted a server remotely, and this caused all of the WS services to either be in "stopping" or "Starting" status.

After an entire day I was able t get into the server and I replaced the config.xml the eim.exe and the websense.ini,  resulting in all services working, WITH THE EXCEPTION of the Websense Filtering. What can I do in order to get the Websense filtering service to work again?

Thank you

↧
Search

Triton - Administrator for Personal Email Manager

December 19, 2013, 12:04 pm
$
0
0

There will bet times when we will need to access the users Personal Email Manager facility to view users personal whitelists and blacklists.  Currently there is no PEM Administrator and we would like to see this feature implemented..

↧
↧

Detect keyword in metadata

December 20, 2013, 5:21 am
$
0
0

Hello

For tracking attachments on webmail we need to check keywords in metadata. I know that the feature exist in 7.8 but our customer uses 7.7.3 and upgrading is not an option at the moment. Is there any way to port that script to 7.7.3 ?

↧

Websense 7.8.1 on Server 2008 SP2 64 Bit?

November 19, 2013, 7:22 am
$
0
0

The release notes say 7.8.1 is supported on Server 2008 R2, and support was removed from Server 2008 32-bit, but nowhere is compatibility addressed for Server 2008 SP2 64 bit. Is 7.8.1 supported on Server 2008 SP2 64 bit?

-Keith

 

↧

TS1.explicit.bing.net - TS2.explicit.bing.net -TS3.explicit.bing.net

April 15, 2013, 8:24 am
↧

How to allow access to Logmein.com

April 27, 2012, 1:04 pm
$
0
0

I have a user that we've given access to logmein.com, which he uses to remote control into other machines. This has been working for a reasonable period of time (over several months). He now no longer can assess these remote machines. Nothing on the network has changed and I've verified with our firewall team that nothing was being blocked by his IP address. Through a series of tests, I was able to narrow down that Websense was blocking him from remoting into these machines. When i turn off logging and use testlogserver to troubleshoot, I'm not seeing anything blocked. The user can log into the website, but when he tries to connect to a remote machine (via a web browser) he gets a page cannot be displayed message. The traffic is going through through port 443. I've tried to whitelist known IPs for logmein, but as previously stated, he has no problem getting on the site, just connecting to the remote machiens.

 

We're running Websense Web Filter (Triton) 7.1 standalone on a Windows 2003 server, with MS SQL 2005 on the backend.

 

Thanks,

C

↧
↧

Install WSS 7.8.1 on Redhat Enterprise 6.4 (64bit)

December 23, 2013, 7:59 am
$
0
0

Hello guys,

Can you help me to install WSS 7.8.1 on Red hat Enterrprise 6.4 (kernel 2.6.32-358.el6.x86-64), and tel me what is the pre requis?

 

Regards,

↧

Support of Daul External Links

December 24, 2013, 2:14 am
$
0
0

Hi,

I would like to see a Support of Dual external links to support two or more ISPs for load balancing / ISP fail-over / traffic separation for internal vLANs.

 

↧
Search

Add Exceptions + Active Directory

December 24, 2013, 6:45 am
$
0
0

I'm reading the below and trying to understand, if I need to Add Exceptions how do I link it to my Active Directory in order to be able to add groups, users,etc? thanks!

 

Introducing the Directory Synchronization Client
The Directory Synchronization Client helps you supply and maintain data required by Websense cloud-based services.
*
For Websense Cloud Email Security, the client synchronizes registered email addresses and groups.
*
For Websense Cloud Web Security and Websense blueSKY Security Gateway, the client synchronizes users and groups information.
↧

Password Override Not Appearing - 1 Specific Site

December 27, 2013, 8:12 am
$
0
0

We were having this issue with Websecurity 7.6 and recently upgraded to 7.8.1 and it still persists. We specifically block facebook and youtube; however, for some reason we do not receive the override option when we go to youtube. I have searched in all the options and it seems facebook and youtube are blocked the same way, yet when I go to facebook I (and our team) get the override option but not with youtube. We block both using Policies.

When I use test filtering, the results say "Password Override Page Returned" yet I do not see it. We also have a custom block page if that makes a difference. I have not seen this issue on any other page except for Youtube. 

Also want to add, when I go to a blocked page say for example facebook.com and click on the more information link I see

"Your Websense password allows you to access this page at any time."

On youtube it is:

"Your Websense policy blocks this page at all times."

Any help is really appreciated.

↧
↧

Unblocking HTTPS URLs

December 27, 2013, 6:42 am
$
0
0

Hello:

We are running Web Filter 7.1.  We've been experiencing a problem for a very long time even in previous versions but I wanted to revisit to get the official answer.  We have an application that connects to a pool of IPs that all resolve from one domain name (i.e. domain.com points to a list of about 10 IPs in DNS).  Once in a while, the DNS records for this service will change so that it points to different IPs.  Each time this happens we have to unblock the new IPs. 

We have always needed to unblock each HTTPS URL by specifying the IP addresses in Websense (i.e. https://x.x.x.x), instead of specifying "https://domain.com".  Is there ANY way to allow a URL with HTTPS that points to multiple IP addresses, WITHOUT using IP addresses in Websense?  The goal is to put one entry in Websense, that we don't have to keep updating.

Thank you for your help.

↧

Possible for websense to send alert when it stops monitoring

December 27, 2013, 8:25 am
$
0
0

Recently had websense stop monitoring web traffic due to an issue with a service. Is it possible to setup websense to alert an admin whenever it stops monitoring web traffic ? Thank you.

Triton web security ver  7.6

↧

Summary view and Originator view don't match. Hard to tell in Summary view

October 23, 2013, 1:45 pm
$
0
0

The Summary view it's hard to tell who the email came from.  It's a bunch of numbers.  Once you release it shows up in your inbox with a much easier looking originator/From.  Can Summary show this information as well?

↧
Viewing all 2011 articles
Browse latest View live
Search
<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>