Quantcast
Channel: Forcepoint Community
Viewing all 2011 articles
Browse latest View live

ARM alert message after enable WCCP

$
0
0

Hi.

I performed a new installation, WSG 7.8.3. Triton running under  Windows 2008 R2 and the CG is running under LINUX.

The problem here is that after i enable WCCP and setting up the services 0 (http) and 70 (https), an alert message "The ARM kernel module is not loaded with ARM enabled" appears.

Alsohappensto have beenimpossible tomake workproperly WCCP under switch(CISCO6500).

Myquestion is: This errormay becausing problemswithWCCP?
HowI canfix thisalarm?

Greetings

Thank you.

WebSense blackspider authentication windows pops up when forwarding an e-mail

$
0
0

Hello,

My user in marketing received an e-mail that looks like a coupon (html format, or css). The marketing user forwarded the same e-mail to a sales user.

The sales user opened the e-mail and wrote a response. As soon as the sales user clicks a Send button, he is prompted to authenticate against the WebSense ...blackspider.websense proxy. Authenticating using e-mail + domain pswd does not make the authentication window go away. My admin level privileges don't make the authentication box go away either. His outlook 2010 loops between clicking cancel and trying to authenticate. The only way to close everything down and end the loop is to end-task the Outlook process in task manager. This only happens with e-mails that have the same format

However, the e-mail is sent to everyone he replied to with his comments as if there were no issues. Anybody know how can I investigate this...I'm kind of stuck trying to figure out where to start.

P.S. I do not have access to the original html/css email and its headers...I only have my copy which is local to domain so the headers are blank.

 

Thank you in advance for any insight or help you may be able to lend.

-Nermin

 

Upgrading from Websense Filter to V5000 appliance

$
0
0

I currently have 3 servers for websense and a 1 server for microsoft tmg proxy

 

WEBSENSE SERVERS:

Server A:

- Triton infrastructure

Server B: 

- Policy Broker, Policy Server, Policy Database, DC Agent, Filtering service, network agent, Usage Monitor, User Service  

Server C:

- SQL Log Database

 

 

I'm moving to the V5000 appliance. I plan to decommission Server B at some point.  Is there any documentation that shows how to move from web security to appliance?

Can I bring up the V5000 appliance and configure the  on-appliance policy broker, policy server, etc  and after it's up then remove server B (policy broker and other services)? What issues will i have if i have 2 brokers running while i complete the move to the appliance?

 

 

 

New to Websense Filtering

$
0
0

I am the director of a small library.  I just purchased Websense Filtering to filter our patron computers and wifi.  Does anyone know the steps I should take to install the Websense on the computers and wifi.  We do not have a server-the computers are all stand-a-lone.

Celia Bandelier, Roanoke Public Library Director

DC Agent service stops immediately after starting.

$
0
0

The DC agent first fails to poll one of the DC's. When the service is restarted, it starts and stops immediately. Sometimes error 1067 throws up. Please help out. 

Upgrade from 7.7.3 to 7.8.3

$
0
0

Architecture:

- Two V10k G3 appliance with web, email and data security enabled. One of appliance is the Policy Broker.

- One off appliance TRITON Manager running on VM Win 2008 R2 which is our Log server and DSS installed as well

**********************************************************************************************************************

Concern: We want to get the minimal downtime as we cannot afford loosing data security incidents nor logs. Please correct if the below approach is incorrect and confirm us the best practice.

- Suppost that all pre requisites are satisfies like hotfix and patches.

Work flow:

1. Failover the email and web traffic to secondary V10k G3 appliance running 7.7.3, ensure the working and stability

2. Upgrade the primary appliance, Policy broker to 7.8.3

3. Break the connection b/w secondary applaince and TRITON running on 7.7.3 (will start lossing the DLP incidents while processing the email & web traffic) (Q. do we really have to break the connection b/w the same)

4. Upgrade TRITON Management to 7.8.3

5. Restore the web and email traffic to Primary appliance (Policy Broker) running 7.8.3 after establishing all the connection b/w primary appliance and TRITON manager

6. Upgrade the secondary appliance to 7.8.3 and rejoin to the current set up.

 Please let me know if this will work?

Bandwidth management & alerting

$
0
0

 

It would be fine to have a feature that the system sends realtime alert e-mails when clients exceed specified level of bandwidth (to catch users downloading large amount of files/wasting the bandwidth etc.).

Feature Request; Defining exceptions to mutiple Rules under 1 policy


Feature Request: Keyword Alerts

$
0
0

Generate an alert to a recipient list if a user is searching for or visiting web sites that have specific subjects such as:

  • Suicide
  • Domestic abuse
  • Obtaining weapons
  • Drug manufacture

 

 

Feature Request: Authorise Override

$
0
0

Place one (or more) buttons on a block page for one or more specific groups of authenticated/identified users that allows them to override the block for ALL users for 30 mins/60 mins/24 hours/permanently.

Example use case: Teacher (authenticated/identified user) is able to override block on a specific Weapons category web site for an hour to allow the students (other users) doing fencing as an elective sport to examine/purchase equipment online.

 

Feature Request: Limited Access Group(s)

$
0
0

While using the "least restrictive policy" filtering, allow one or more groups to be associated with a Limited Access Policy that applies limits Internet Access.

wsg websense log database - sql 2014 support

$
0
0

we use triton 7.8.2 and ms sql server 2008 for its database. the company db administration has made a decision to upgrade to sql 2014 but websense informed us that it is not supported, at the newest sql2012 has support.

we would appreciate sql2014 support as soon as possible.

kr,

cem

Cloud Email Security - Inbound Notification Exclusion Options

$
0
0

We would like to be able to turn on inbound notifications but with the option to exclude virus notifications. We do not wish to notify users of inbound messages with virus content but need to notify them of other reasons of emails being quarantined.

Upgrade from 6.3.3 - build new instead?

$
0
0

We have a Websense 6.3.3 system that needs an upgrade.  It works well but the config is a mess with tons of user and policies exceptions, making mgt of it a pain.  I'd like to build a new v7.8 system fresh and then just cutover to it.  At cutover time, we can shut down the existing server and re-IP the new one.  The existing system is all on a single 2003 server.  Any gotchas with building new and such a cutover?

A side question on that, the docs say SQL express that comes with Triton is suitable for small deployments, what is small?  We are looking at no more than about 1300 end points.

Anyone ever just build new and started over instead of an upgrade?

 

Add 'Processed By' column to Message Log view

$
0
0

Add Processed by column to Message Log view. When an issue is occurring, in order to narrow it down to one particular appliance I have had to open each individual message log looking for a pattern. If shown from the default view, it would be easier at a glance to see if an appliance issue is to blame.


Alert when True Source IP stops functioning

$
0
0

With True Source IP in a hybrid scenario we can take advantage of DHA prevention. We recently had an issue where True Source IP stopped functioning and was reporting the cloud IPs instead. DHA kicked in and started dropping our inbound e-mails. The system should alert if True Source IP is enabled but is falsely reporting the two cloud service IPs as source.

Worth upgrading from 7.8.1 to 7.8.4?

$
0
0

Both of my websense servers are currently running version 7.8.1 - is it worth upgrading to 7.8.4?  There are no performance/filtering issues that I know of, but I always like to stay up to date with our security components.  Also we only utilize Websense web security at this time.  

Sports Category

$
0
0

Websense Management,

 

I have a suggestion: draw a category distinction between watching sports and playing sports (or doing healthy activities). Many of your customers probably don’t want employees checking baseball scores, reading about basketball games, etc. (addictive content), while at work, but are likely okay with their employees gathering information about healthy activities (likely non-addictive content). Here are two examples of content that is about doing healthy things (good for employee health, and therefore the bottom line) rather than spending time watching things (bad for the bottom line), that is currently lumped into your blocked “sports” category.

 

http://www.leaguelineup.com/welcome.asp?url=oaklandsoftball

http://ancestral-nutrition.com/why-white-rice-is-healthier-than-brown-rice/

 

This would allow your customers to more finely tune what they wish to block from their employees.

Thanks!

Websense Hybrid Web Security blackspider pop-ups

$
0
0

I just want to start a thread here on an issue that happened several weeks ago where our users are being prompted for authentication credentials with a pop-up, when things have been fine for over two years for us. I've opened a case, #01783640, and they are working on this issue. If you have a similar issue, open a case and be vocal about them working on a solution. So far they have not identified the issue.

 

The case has been escalated to the back line without word as to whats causing this. I heard that it could be part of the server farm upgrade they are doing, I've also heard it could have been a Microsoft update from several weeks ago. Regardless, they need to help us!

"[Triton] Report on multiple source servers

$
0
0

We have multiple WCG connected to a policy broker (which is a triton server ).

 

Suppose we have two WCG that cover a certain physical location and that we need to make a report on what's happening in this location.

 

I need a way to say to triton: give me a usage report of what's happening in those two WCG only. I can do an investigative report and check only the needed WCG servers but i'll get a separated usage for every soure server.

 

What i need is a sort of a global usage report for only two WCG servers.

 

It would be great to have this feature

 

Regards

 

Nabil

Viewing all 2011 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>