Hi all
First post on the forum.
We are using Web Security v7.8.4.
I'm having an issue when trying to recategorize a url for https://facebook.com, we currently have Social Web - Facebook set as the confirm action.
When I add the https://<IP Address>:443/ for https://facebook.com to the recategorized URLs it blocks Facebook rather than asking the user to confirm.
Does anybody know a work around for this issue?
Thanks
Has anyone successfully sync'ed eDirectory to the cloud and tested?? The problem is that we can not pull the machine name in to the sync client. When you point to the PAC file in the browser and try to browse, this causes a prompt to login every time you open the browser.
Hi all ;
Due to a websense KB, I will add a line to the websense.ini file.
Under the [DirectoryService] Heading, I should add a line as "CacheTimeout=60"
But there isn't a [DirectoryService] heading in my websense.ini file.
What will I do?
Recently we have quite a number of Phishing emails received, which has a link to a compromised phishing site with a form.
My question is : The link is identified as "Web Hosting" in the downloaded Master Database, but when we manually check it in Websense ACE Real Time Report analysis it is identified as " Phishing and Other Frauds". If a user click the link it is not blocked by Websense Web Security because it is identified as "Web Hosting" only. What we can do is to passively recategorize it to phishing site and block it. Is there any way we can make our policy to block based on the Real Time analysis instead?
Hi,
We are not able to open called with Websense, through so service request - open a new case.
Can you help?
Hi Team !!!
I'm facing a problem with Skype. Takes too long to connect successfully, the user needs to click several times at "Login" to connect, the only error it's that Skype could not connect.
At Proxy it's already at tunnel mode.
And the filter ""Internet Telephony" and "Uncategorized" it's Allow.
Can you guys help me please!! Thanks.
Hi everyone. I've been using Websense to filter/monitor the 200+ users here for several years and this Triton v7.5 is just about to p!ss me off. I have Websense running on a Windows 2003 server in an AD environment with port-mirroring on the switch to run the filtering/monitoring with no appliance or other device in the mix.
I am able to filtering most of the other crap people try to get to (shopping, adult material, gambling, etc) but Gmail and Yahoo mail have become my nemesis. So far I have added these url's (I'm typing them exactly as I have them in the category) to the "Internet Communication" > "General Email" which everyone is blocked except a couple of users are blocked from.
I've checked the membership in the group that is excluded from being blocked and the users which should be blocked are not.
I then added these under Regular Expressions in the same category.
Somehow when i test the user's access, they can get to the https://accounts.google.com site although the site looks very generic. The computer's IP is not in a separate policy.
The last part of this craziness is that the logs on testlogserver show (SEARCH ENGINES AND PORTALS) > (Category Not Blocked). I'm guessing this has to do with allowing searches to be conducted on google.com(?)
HELP! I would love to prevent these jokers from getting past Websense and into Gmail/Yahoo. Thank you. (I have already tried several searches from related posts on this subject)
Hi, I am using 7.6 and going to upgrade to 7.8. In my test enviroment, I use Squid 3.1 + Linux with Web Security 7.8. when I set up like this
icap_enable on
icap_service service_req reqmod_precache bypass=1 icap://127.0.0.1:1344/icap
adaptation_access service_req allow all
Hi, I am using 7.6 and going to upgrade to 7.8. In my test enviroment, I use Squid 3.1 + Linux with Web Security 7.8. when I set up like this
icap_enable on
icap_service service_req reqmod_precache bypass=1 icap://127.0.0.1:1344/icap
adaptation_access service_req allow all
Hi guys,
I need some help here.
I have a client with some issues when he try to access to a site
https://reportnew.netprovider.biz
So, i have a a custom filter with a regular expressions on it, that permit this site, and also have a Recategorized URLs filter with the same url.
Anyway the client says That it was able to navigate to the site without problems but Suddenly he Couldn't do it anymore
He sent me a picture of the message in his browser it says
ERR_TUNNEL_CONNECTION_FAILED
anyone know what can i do to fix this problem?
Thanks!
Hello
we try to reach the https://login.live.com
without any policy, so full admin net,
we see the realtime monitor is permited, but the site just loading, and nothing happening, after a while we get
internal error - server connection terminated
anyone have idea what is the problem.
websense 7.8
Morning
We are currently have websense set up in our test network and so far all running very well. As I have spent a lot of time setting up filters and policies, is there any way to export just the filters and policies to file so that when we go live I can just import the rules to the live server.
This used to be an option in Surf Control but cannot find anything close in Websense.
Many Thanks in advance
Paul Foreman
My company has been using Email Security (now at version 7.3, the last) since the early days of it being Surf Control. Lately though, it seems that the amount of spam leaking through the cracks is increasing a significant amount, despite the server's update schedule running regularly.
I understand that this product is no longer getting version upgrades, but my question is: Is there any reason that it should be becoming less effective as time wears on, despite definition updates? What can I point to to try and figure out how to get a better detection rate without cranking up the false positives?
Is there any reason that the Email Security Gateway or other Websense products would do a better job of filtering our corporate mail compared to our Email Security 7.3 with all the latest definitions, and if so, how significant would you say that change would be?
Hi guys,
I need some help here.
I have a client with some issues when he try to access to a site
https://reportnew.netprovider.biz
So, i have a a custom filter with a regular expressions on it, that permit this site, and also have a Recategorized URLs filter with the same url.
Anyway the client says That it was able to navigate to the site without problems but Suddenly he Couldn't do it anymore
He sent me a picture of the message in his browser it says
ERR_TUNNEL_CONNECTION_FAILED
anyone know what can i do to fix this problem?
Thanks!
.
Hi,
We have a websense appliance (V5000G2) running code version 7.8.1.
On our Windows Domain Controllers, I frequently see these two events:
Event 4776:
The computer attempted to validate the credentials for an account.
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Logon Account: admin
Source Workstation: APPLIANCE-WSE
Error Code: 0xc0000234
followed by Event 4625:
An account failed to log on.
Subject:
Security ID: NULL SID
Account Name: -
Account Domain: -
Logon ID: 0x0
Logon Type: 3
Account For Which Logon Failed:
Security ID: NULL SID
Account Name: admin
Account Domain: zzz
Failure Information:
Failure Reason: Account locked out.
Status: 0xc0000234
Sub Status: 0x0
Process Information:
Caller Process ID: 0x0
Caller Process Name: -
Network Information:
Workstation Name: APPLIANCE-WSE
Source Network Address: xxx.xxx.xxx.120
Source Port: 33548
Detailed Authentication Information:
Logon Process: NtLmSsp
Authentication Package: NTLM
Transited Services: -
Package Name (NTLM only): -
Key Length: 0
This event is generated when a logon request fails. It is generated on the computer where access was attempted.
The Subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.
The Logon Type field indicates the kind of logon that was requested. The most common types are 2 (interactive) and 3 (network).
The Process Information fields indicate which account and process on the system requested the logon.
The Network Information fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.
The authentication information fields provide detailed information about this specific logon request.
- Transited services indicate which intermediate services have participated in this logon request.
- Package name indicates which sub-protocol was used among the NTLM protocols.
- Key length indicates the length of the generated session key. This will be 0 if no session key was requested.
The offending device is the V5000, but I have no idea where this 'admin' ID is configured on the appliance, or why it's contacting our DCs for authentication. I'd love to reconfigure it so it's not hammering AD with authentication noise... Can anyone help me out?
Thanks,
Greg
Hello,
I am responsible for the US rollout of Websense for my company but do not have access to change sync settings with Active Directory. Currently, our US Websense policy is sync'ed with an AD group, call it "US-Websense". Any individual users I add to this group sync just fine. But any AD groups that I add to "US-Websense", the users in those groups do NOT sync with the policy. For example, if I add site distribution lists, or security groups. I already opened a case with technical support and they made it seem like it was possible, but it's been a month and those responsible for the sync with AD still can't make it happen.
Does anyone here have experience with this? I can't imagine you can't use preexisting AD security and distribution lists to add users to the policy, and that every user must be individually added.
Please let me know. I've given up on waiting for this and did a dsget to create a list of all the individual users to manually add them all but moving forward that is much harder to maintain.
Thanks.
Hello,
I see in the system requirements for Remote Filtering Software Server 2012 is supported but Windows Server 2012R2 is not listed. Is this also supported for Remote Filtering Software server?
Thanks
Hi!
Can anybody help me?
I have task:
"Configure Cisco ASAv to work with Websense URL filtering"
ASAv - ver. 9.2(1)
Websense - ver. 7.8
I installed Websense, added key, download DB, add IP assa to monitoring list,
On ASAv a run command "url-server servers vendor websense host *.*.*.* protocol tcp version 1"
In the log ASAv i see message: "URL Server *.*.*.* not responding"
What i must to do that fix this problem?
Hello,
Does anyone know whether or not Web Security 6.1 is protected from the adobe angler threat? I'm not sure if it used the ACE in the cloud technology.
Thanks for taking the time,
Rhonda