Quantcast
Channel: Forcepoint Community
Viewing all 2011 articles
Browse latest View live
↧

7.6 - Recategorized URL still blocked as "security override blocked"

July 27, 2011, 11:55 am
$
0
0

I just upgraded to 7.6.  I have a custom URL category called iTunes that is allowed for a few users.  I had one of them tell me that they are being blocked trying to download iTunes.  The URL of the download is "http://www.apple.com/itunes/download/".  If I run the URL Category check, it tells me it is in the iTunes category I created.  However, if I run the Test Filtering, it tells me that the result is "Security Override Blocked" and that the URL is actually in the category "Freeware and Software Download" (which is blocked for all users).

Why didn't the recategorization fix this issue?  What can I do to allow this for my users?

↧
Search

What does Blocked vs Refused mean?

December 12, 2014, 11:05 am
$
0
0

Hello,

When I view our hosted Websense dashboard, and I click on some of the activity, sometimes it will say Blocked, and sometimes it will say refused?  I was wondering if this made any difference?

Thanks,

David

 

↧
↧

Websense Hybrid Web Security blackspider pop-ups

September 4, 2014, 2:58 pm
$
0
0

I just want to start a thread here on an issue that happened several weeks ago where our users are being prompted for authentication credentials with a pop-up, when things have been fine for over two years for us. I've opened a case, #01783640, and they are working on this issue. If you have a similar issue, open a case and be vocal about them working on a solution. So far they have not identified the issue.

 

The case has been escalated to the back line without word as to whats causing this. I heard that it could be part of the server farm upgrade they are doing, I've also heard it could have been a Microsoft update from several weeks ago. Regardless, they need to help us!

↧

Decreasing effectiveness of Email Security 7.3

June 25, 2014, 6:11 am
$
0
0

My company has been using Email Security (now at version 7.3, the last) since the early days of it being Surf Control.  Lately though, it seems that the amount of spam leaking through the cracks is increasing a significant amount, despite the server's update schedule running regularly.

I understand that this product is no longer getting version upgrades, but my question is: Is there any reason that it should be becoming less effective as time wears on, despite definition updates?  What can I point to to try and figure out how to get a better detection rate without cranking up the false positives?

Is there any reason that the Email Security Gateway or other Websense products would do a better job of filtering our corporate mail compared to our Email Security 7.3 with all the latest definitions, and if so, how significant would you say that change would be?

↧

30 day trial license question

April 22, 2009, 9:39 am
$
0
0

I have installed Websense Manager 7.01 with the 30 days license.  I found I could not do any filtering and categorization with it.  When I use "URL Category" toolbox, all the urls return "Uncategorized" and the "Test Filtering" toolbox all returns "LICENSE LEVEL EXCEEDED NOT BLOCKED" when I tried a filter I defined.  I'm wondering is it because of the license I'm using.  If the 30 days license won't allow me to try any filtering, what can I do with this license?  Thanks for any help.

↧
↧

websense 7.1 install error

December 12, 2014, 8:04 am
$
0
0

hello,

i am trying to reinstall websense but during the reinstall i receive the following error "Could not configure Websense Manager (Code: 7)" i did see another post with the same issue where a moderator provided the user a removal tool over e-mail. i would like to know where i can find this tool.

 

Thank You

↧

Upgrading 7.7.3 to 7.8.3 or 7.8.4?

January 12, 2015, 3:55 pm
$
0
0

Hello,

I have a virtual machine under Windows 2008 R2 hosting Websense web security 7.7.3 and another VM under CentOs hosting the Websense Content Gateway.

I would like to know if I can upgrade my plateforms to 7.8.3? do i have to install the 7.8.3 file on a new server and migrate all the data or i can just launch the install file on the same server and i'll be prompted to upgrade my version of Websense?

Do you think I should go directly for the 7.8.4 version or it's better to wait a bit longer and stay with the 7.8.3 version?

Thank you

 

Regards

↧

commandline check policy

January 14, 2015, 6:01 am
$
0
0

in the web interface webfilter 7.5 has a utility check policy. whether there is the same command line utility? I would like to automatically check an effective policy for the users

↧
Search

no Reports since last Windows Updates installed

January 14, 2015, 7:02 am
$
0
0

running WUC v7.7.3.11 on Windows Server 2008R2, we ran Windows Updates on the server since then, then reporting seems to have stopped.  Anyone come across this before??  We went through the Status/Alerts, everything seems to be running normally, here's what's in the Alert window:

1) A Log Server (192.168.12.4) has not received log files from Filtering Service for over an hour.
When Filtering Service cannot communicate with Log Server, log records are not created for any Internet activity that is filtered.
 
2) One or more reporting jobs failed
Scheduled jobs in presentation reports were not successful. 

3) The Log Database ETL job has not completed successfully after 4 hours on the database machine at 192.168.12.4.
The ETL (Extract, Transform, and Load) job is responsible for processing data into the partition database. It requires sufficient disk space, disk speed, and other system resources to run efficiently.

↧
↧

Can't create partitions

January 15, 2015, 7:42 am
$
0
0

Hello

WSS 7.8 on 2012 R2.
Remote SQL 2008 R2 SP3 (standard edition)

Logging been working OK for a while since upgrade from 7.6.  Host and application was fresh install of 7.8 but db was upgraded.  Recently disk filled on WSS server, due to files in cache folder.  Turns out the existing database partitions (only 12 of them) are full but the Agent job is not creating a new partition.  If I try and create manually through Triton web interface, no joy.

The actual database is created, the files appear on disk in the correct folder on the SQL server, so NTFS permissions seem OK.  App event log on SQL shows the database created, various properties eg. autoshrink set, the recovery model set to Simple, and then the ETL Agent job runs but errors.  The .mdf and .ldf files are then removed.  The error from the Agent is:

SQL Server Scheduled Job 'Websense_ETL_Job__wslogdb70' (0x05C46BF717285D45B680BAA3550F34DC) - Status: Failed - Invoked on: 2015-01-15 15:22:20 - Message: The job failed. The Job was invoked by Schedule 86 (Websense_ETL_Job__wslogdb70_Schedule). The last step to run was step 1 (step1).

So when I look at the history in Mgmt Studio, I see a more interesting error:

Executed as user: <DOM\SQL_AGENT_ACCOUNT>. usp_new_partition() : 1: Invalid column name 'record_number'. [SQLSTATE 42000] (Error 50000).  The step failed.

I have deleted and recreated the jobs using the provided SP.

There appear to be no other abnormal errors on either the SQL host or the WSS host.  That SQL server is used by a few other applications which are working fine.

I have followed my nose through google searches, looking at various things.  One thing I looked at were the triggers in wslogdb70 and there may possibly be a relevant duplicate but I have nothing to compare against.  In sys.triggers I have 23 rows, the name values or which are

WsUpdateUserDirObjectTrigger
insert_trigger_db_maintenance
insert_trigger_wse_version
wsPartitions_Trigger
wsPartitions_dTrigger
usp_wse_db_event_trigger
trigger_wse_dashboard_config
insert_trigger_wse_etl_db_config
insert_trigger_wse_db_config
insert_trigger_wse_ibt_config
insert_trigger_wse_trend_config
trigger_ua_etl_config
trigger_wse_etl_config
update_trigger_filter_sets
insert_trigger_filter_sets
insert_trigger_filter_set_params
WsExpTriggerRequestCount
insert_trigger_report_spec
update_trigger_report_spec
trigger_wtg_etl_config
insert_trigger_wse_products
trigger_hosted_etl_config
trigger_amt_etl_config

Might be barking up completely the wrong tree!

Anybody seen anything like this before?

The account used to access SQL is a domain account, currently a member of sysadmin as well as a local Administrator of the both machines but given the Agent error about 'invalid column name' I think the problem is not permission related?

Any suggestions?

Thanks

D

↧

upgrade from 7.7 to 7.8 - management server not working

January 15, 2015, 9:50 am
$
0
0

I just upgraded our Web security infrastructure from 7.7 to 7.8 in preparation to migrate the whole thing over to new 2012 R2 boxes (they are currently running on 2008 R2).

After I have upgraded everything the management console can no longer connect to the policy server.  They are both running on the same machine.  All filtering servers can connect to the policy server with out issue, and I can also telnet to the policy server port (55806) from other servers.

When I log into the management page I get this error "The management console cannot connect to the primary Policy Server. The version is correct but Policy Server cannot be reached."

I did end up with a corrupt websense.ini during the upgrade, but I restored from backup and all values seem correct.  Any ideas where to look next?

↧

Upgrading from Web Wecurity 7.7.3 Windows 2008/SQL2005 to Windows 2008 R2/SQL 2012 Web Security 7.8.4

January 16, 2015, 9:52 am
$
0
0

I have to upgrade to WS 7.8.4. I need to move all the log data forward also.

I have a new Windows 2008 R2 server for the application and SQL 2012 server for reporting. It appears that there are 8 databases that have been created on the old SQL 2005 server.

Do all the databases have to be moved over? If I have to move the databases over, during the install, will there be a point where I can point to the new SQL server and restored databases to get them upgraded to version WS 7.8.4?

Has anyone seen any "gotchas"?

thanks

 

↧

Safe Search not working on IE11 with Google seach engine

January 19, 2015, 5:57 am
$
0
0

Hi All,

Currently using web filter 7.7.3.1147 I am having and issue with safe search. I have had the search filtering enabled form some time now and it works ok.

but I have having an issue with IE11 in that safe search is not enabled on it. for all other search engines e.g. bing, yahoo etc. safe search is enabled and works fine.

our organisation runs on IE8 at minute and safe search is enabled and working fine on google for ie8 we are going to upgrade to ie11 soon and would like this issue resolved. is there any hotfixes or should I be upgrading to 7.8.4

it appears to be with google just as I have tried it with firefox and ii am having the same issue

Thanks

 

↧
↧

Websense 7.8.4 Upgrade Cannot Stop Remote Filtering Client Pack

October 8, 2014, 2:37 am
$
0
0

we have an Installation of Websense Web Security 7.8.3.1295 on a 2008R2 Server which has the following Components installed:

Remote Filtering Client Pack

Remote Filtering Server

now i am trying to upgrade to 7.8.4.1390 when running the installer i am presented with an error that the installed could not stop the Remote Filtering Client Pack Service, This service does not exist. Running services.msc i can see the only Websense services are:

Websense Control Service

Websense Remote Filtering Service

Both of these are stopped there are no Websense processes running other than the 2 installers, yet i still receive the error and i cannot proceed any further.

↧

user authentication

January 21, 2015, 12:47 am
$
0
0

Hello

For user authentication now we use dc agent, but the problem is, when we authenticate to active directory, or any other server, we see in real time monitor, my ip and user change the last authentication profile, and use that profile what i use to login windows.

How can we authenticate users, to use windows logon user?

When we try the logon agent, always ask username password.

Can we set somehow to not ask authenticatin, and use windows logon authentication?

↧
Search

The Web Security manager cannot connect to Policy Server

January 21, 2015, 7:24 am
$
0
0

So I have a unique issue that popped up recently.  One of our admins went to log into the Triton Unified Security Center, after putting in his credentials, we get the following error message.

The Web Security manager cannot connect to Policy Server. Make sure Policy Server is running, and that network communication is possible between the TRITON management server and the Home Policy Server machine. To attempt to restart the Home Policy Server, click Restart.

After we see this, I check the status of our Policy Server, and everything is in the green.  I reboot the Policy Server and nothing changes.

Patched our Policy Server up to the latest (7.8.4), but nothing has changed.  I also rebooted our TRITON server, nothing has changed.

Looking through the event logs on the TRITON server, I am seeing the following error message logged every minute.

Faulting application name: WsScheduler.exe, version: 7.8.1.1485, time stamp: 0x525901e3
Faulting module name: WsScheduler.exe, version: 7.8.1.1485, time stamp: 0x525901e3
Exception code: 0xc0000005
Fault offset: 0x0000000000006963
Faulting process id: 0x7f8
Faulting application start time: 0x01d0358e2e65697f
Faulting application path: D:\Program Files (x86)\Websense\Web Security\bin\WsScheduler.exe
Faulting module path: D:\Program Files (x86)\Websense\Web Security\bin\WsScheduler.exe
Report Id: 6c227f3b-a181-11e4-b81a-0050569c41e3

 

Anyone have any ideas of where to look at to get this resolved?

 

↧

Websense Web Security could not be launched.

October 8, 2013, 1:54 pm
$
0
0

My 7.7 deployment continues to be very buggy.  This error has happened while Websense support was on a support session with me as well.   Essentially the service just does not become available and the error that returns on attempting to login is Web Security could not be launched. 

I have recycled the services on the App server even going so far as to reboot the box.  All services are running but for some reason this error occurs. 

I believe the tech may have gone all the way through the install process to get this back... 

Any thoughts on a better way to resolve this rather than a new install?

↧
↧

Triton web filtering and "load balancing"

January 22, 2015, 8:35 am
$
0
0

Hello,

 

We are converting part of our network to our existing Websense Triton web filtering environment.  I am new to Websense and would like to ask advice or seek guidance to the best set up.  We currently have one PC (Windows 2008 R2 32 Core 260 GHz 32gig memory) running our Triton system.  Since we are removing Checkpoint out from part of our network and moving to another Cisco ASA, we will be pointing the rest of our network to our PC running our Triton system as well.

My concern is that since we have such a large network that this one PC will not be able to handle the load. My question is, I would like to implement some sort of load balancing between this PC and another for web filtering.  I've read documentation and it seems like all I need to do is install another network agent and/or filtering service on a duplicate PC and point it to our policy server.  Would anyone have a good idea if this would be the best course of action?

I should also mention that our current PC is the Policy server, filtering service, etc.

↧

Websense does not support installing Web client on laptop w/32-bit operating system and 64-bit hardware

January 22, 2015, 10:20 am
$
0
0

Websense does not support installing Web client on laptop w/32-bit operating system and 64-bit hardware.  At least this is the answer I got back when I put this question to tech support.  Can this possibly be true? Most of our laptops are in this configuration because they did not have enough memory to need 64-bit OS.  All of the hardware we've bought in the past two years is 64-bit, but we have installed 32-bit Windows 7 for compatibility with older applications and drivers.

Now I'm faced with not being able to deploy the endpoint on the majority of our machines.  I've tried installing 32-bit and 64-bit endpoint software on the machines in question and no go.

Anyone else faced with this?  More importantly anyone figure out a work-around?

Thanks.

--Sandy

↧

SQL Server Scheduled Job newlogdb63 failed

January 23, 2015, 12:18 pm
$
0
0

We are running WebSense 7.5.

Oddly, we are getting an even 208 regarding our SQLSERVERAGENT: SQL Server Scheduled Job 'Websense_IBT_DRIVER__newlogdb63' (0x75B4C94EC6D5A44B9A3A41DEAF733BE5) - Status: Failed - Invoked on: 2015-01-23 02:00:01 - Message: The job failed. The Job was invoked by Schedule 15 (SCHEDULE). The last step to run was step 1 (STEP1).

This seems to be pointing to when we had version 6.3 installed.

How can I remove the scheduled job for that version? I don't see it in Scheduled tasks in SQL Server Management Studio.

↧
Viewing all 2011 articles
Browse latest View live
Search
<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>