What does this message mean? One of our user's messages was quarantined for this reason, but I can't see anything out of the ordinary in the message.
Detected Issues format [long-words]
Allow download, block upload for online storage sites
Problem with upload large files ! !
Hi Team.
I'm with a problem with "uploading large files (25MB)" to a virtual disk".
When the user tries to upload a file with 25MB, starts ok, but after some time, appears a message error http 500. I tried a lot of configurations, but nothing solved. Files with 3 - 7 MB uploads ok!
I changed the timeouts from both appliances:
/opt/WCG/config/records.config
CONFIG proxy.config.http.transaction_no_activity_timeout_in INT 3600
CONFIG proxy.config.http.transaction_no_activity_timeout_out INT 3600
CONFIG proxy.config.http.connect_attempts_timeout INT 3600
CONFIG proxy.config.http.accept_no_activity_timeout INT 3600
/opt/WCG/sxsuite/bin
./oemtool globalconfig inact_open_timeout 3600
./oemtool globalconfig inact_read_timeout 3600
And now it’s no appearing error message, but the upload just stop the “upload bar”, with no error message.
The user have no policy to DLP, just monitoring.
WSG / Web - 7.7.0 and Data 7.7.2 / 2 appliances
Regards
Jeferson Furio
Websense, worst customer support?
We have been using Websense for two years now, thankfully our contract will soon be up for renewal. Technical and customer support is by far the worst of any service company I currently deal with. Initial responses from support staff are inadequate, effectively emailing you to say they have the problem noted. Then nothing for days at a time. We currently have a case which has had no response from Websense for twenty five days. Is that acceptable?
We are using the V5000G2 appliance, and each patch release is worse than the last. I have never been able to successfully get a patch installed without it breaking other parts of the product or requiring several remote sessions to get it working. It’s not good enough for the price you pay
Websense is an overcomplicated product which is disjointed and difficult to manage. It requires a lot of internal support hours to have it running effectively. There are very few technical consultants with Websense that I have worked with which are actually knowledgably about the product and able to support it well. Often the support consultant expects you to know the product inside out, I’m sorry but this is why we pay for support!
I would not be happy recommending Websense to anyone and it will be difficult to be persuaded to stick with this product.
Delayed Message queue alerts/notification
Hi,
The fact that you can easily look at the Delayed message queue and its content is fine, however some of our customers would like to have an option that they can set some kind of threshold for the delayed message queue.
When it reaches a certain amount of retries or the queue suddenly fills up with more than couple of hundred messages, that they can then get an email notification to multiple recipients or help desk email address.
Currently there is alerts on queues but it is either on/off and you cannot set the threshold or trigger for a notification
Websense Content Gateway Access RedHat only?
I was looking at possibly adding Content Gateway Access and was curious if using Red Hat is the only official way to go with this?
Exporting Audit Logs
We would like to be able to automate the exporting of the audit log reports to be imported into our Arcsight system.
Audit logs for Websense Triton / Web Security / Applience tools
Dear Websense,
Feature you would like implemented:
The ability to maintain/query audit logs possible on the SQL database.
-Triton console
-Websense content gateway(Appliance manager / Tools)
Immediate Impact on business:
High security Risk
Use Case for the feature:
X10G Blades 64
V10k 16
If we count one export 5 min it would mean 84*5 minutes.It would easier to maintain(we need it for 90 days at a minimum) and audit if it would be in a SQL database.
Remote Filtering Problems
We have added an Remote Filtering Server (RFS) to our Websense environment and installed the Remote Filtering Client (RFC) on a test notebook.
When the client is inside the network it can telnet to the hearbeat port and not reach the remote filtering port. When the client is outside the network it can telnet into the remote filtering port, but not the heartbeat. All as it should be.
When the client is connected to a public WiFi, filtering works fine. When the client however is connected to the LAN we are getting "Request has been blocked. Reason: Websense Remote Filter has been interrupted. Options: Please wait while the service is restarted. If you are unable to access the Internet after a few minutes, contact your network administrator."
We have the setting "fail close" enabled - on purpose.
Any idea what's wrong?
Websense Policy server creates sessions on Windows XP
Hi,
The clients are using proxy file to connect to Websense Web Security Gateway and we noticed that Windows XP computers have shared sessions to the Web Security Policy server. Is it normal or there something wrong on the configuration? Can you explain this behavior. Thanks in advanced.
Presentation reports scheduler is not connected to the Log Database.
When I connect to Websense, I get the error "Presentation reports scheduler is not connected to the Log Database." It seems that after the server boots (Windows Server 2003 R2 x86), the SQL Server 2008 Reporting Service hangs. It eventually starts after a couple minutes, but I think it is causing Websense to fail when it tries to connect to the log server. Has anyone else experienced this? Any ideas on how to solve it? Thanks.
World Cup
I have been asked to verify if the World Cup Soccer tournament matches the criteria for the 'Special Events' category by my Management. There have been some sporting events that Websense has temporarily moved to this category in the past and I'm attempting to find out if this will be the case for the World Cup, or will I need to make arrangements to block locally?
Thanks in advance for any information that can be provided.
HTTPS Youtube issues
Youtube is "filtered" in multiple places. Tone it down to one place for one URL, or make it possible to set a level of importance to re-categorized urls.
i.e. Social Web- Youtube does not stop youtube HTTPS traffic no matter how you setup your network agent/firewall/asa. Log refers to it as a search engine/portal as well as social web, and streaming media. Simply putting it in one category would be super useful or make it so in the recategorizing setup you can setup inheritance properties so you can designate which rule to follow "j.i.c."
Please
Upgrade management to 7.8.3 while using 7.7.3 appliance possible?
As above.
Is it possible to install 7.8.3 management server and talk to the existing 7.7.3 appliance?
Or do i have to match them both? No backwards compatibility?
Improved SafeSearch
The Safe-Search feature provided by Websense seems to be Broken.
Consider the below ex.
As per the Websense default policy, Adult and Gambling category are Blocked.
However, any users can goto Google.com and search for Adult information and also view the Adult Images ( actually the images are loaded from Image Servers and not from the Audit sites directly).
I feel that there should be some kind of mapping between the Words typed in Search Engines and with the Master Database.
The Safe-Search feature within Websense needs to be fine tuned in such in a way to block with the Keywords are mapped to a Blocked Category.
Eg: If someone searches for a Adult image, it should be blocked without we re-categorizing this as a Keyword.
Load-balancing for v10K's
Currently, we are using DNS round-robin based method for load-balancing the user traffic across 4 V10K.
We have created a Round-Robin DNS record and add all the P Interface Ip address in it. The user traffic is load-balanced all. There are many limitation in this as we can use traffic getting populated to a particular v10K most of the time. Traffic sent to the v10K server which is down as the DNS Cache still resolves to the dead v10K.
Websense to come up with their own version of Load-balancing ( like Microsoft ISA NLB) which will be take care of fail-over as well as Load-balancing.
On-Box virtualization
we would like to have the feature of On-Box virtualization within Appliance. This will assist in creating multiple instance of WCG's from the same Appliance.
This will help us in positioning single V10K's for different project requirements which require unique bandwidth
CVE-2014-0224 - OpenSSL MiTM Vulnerability and TRITON Unified Security
I have TRITON Unified Security Center installed -
Unified Security Center build: | 7.6.2.18 |
Web Security build: | 7.6.2.1449
|
I do not have Data Security or Email Security as part of the install. My question relates to CVE-2014-0224 - OpenSSL MiTM Vulnerability: how do I know if I am affected? How do I know the version of OpenSSL I have installed?
Thanks
Discovery Task result with no. of incidents
As we have lots of discovery task running, we would like to have a feature of getting the number of the discovery incidents generated for each tasks.
Need Redhat EL6 client
I need an EL6 client in order to be able to pass audits. Please help! EL6 has been out since November, 2010 so there must be a large enough base out there to warrant a client.
I will be happy to beta-test if needed.
Thanks,
Warren