Quantcast
Channel: Forcepoint Community
Viewing all 2011 articles
Browse latest View live

Read Only Access - Personal Network Storage

$
0
0

Hi,

I'm aware that the Forcepoint Web Gateway can enable read-only access to selected Social Media services.

I'm wondering if anyone has managed to apply an equivalent control to services in the Personal Network Storage category?


The specific scenario I have is that an accounting website have chosen to use Slideshare embedded in their site to share a presentation.  This is cateogorised as Personal Network Storage - which our company blocks due to risk to corporate information.

What I'd like to do is allow staff view / read only access to the service so they can consume information - but not open access to the service or category in a manner that allows them to upload information.

Is this possible?

Thanks,


Geoff


Sanity check before upgrading Triton/Websense Filter 7.8.4 to 8.x

$
0
0

Hey community!  I have a Windows 2008 R2 server running Websense Unified Security 7.8.4 in standalone mode (all services on that server).  I've reviewed the migration document (https://www.websense.com/content/support/library/web/v81/upgrade/wsg_win_up.pdf) but wanted to check with others before diving into the upgrade and see if there were any "gotchas" that were identified.

I appreciate your help.

Networkagent error on install

$
0
0

We are trying to install the network agent from 8.1 on Windows Server 2008 R2 Citrix servers and keep getting the error "WBSN.Network  Agent -jar error installing"  We have uninstalled and reinstalled with same error. I can not seem to find any information on this error.

Unable to Schedule Investigative Reports for 2016

$
0
0

For some reason we are suddenly not able to schedule an Investigative Report for 2016 either as a Daily Report or just for a single execution.  Does anyone have a suggestion on how to fix this?

Anyone know what www.falingfalcon.com is?

$
0
0

This started showing up on our reports as the most blocked URL with hundreds of blocks per day.  It's flagged as a Parked Domain within Websense.

I accessed the URL from a laptop not being filtered and the only thing on the home page is a 1x1 image so it seems to not really do anything except maybe be for tracking something?

At first we thought someone might have some malware but once we noticed it's coming from a bunch of people, we aren't sure what to make of it.

SamAccountName

$
0
0

Hello,

 

I have a customer on v7.8.3 who is using the Multiplexer to send data to his Qradar.  Currently he gets user information in this format

LDAP://gunlakecasino.net OU=000402 - Accounting,OU=Users,OU=GunLake,DC=gunlakecasino,DC=net/Trudyann McLaren

and he would like the information to come up as tmclaren.  If the customer would use a customer SIEM to show the username as desired, what string should he use?

 

Thank you,

Trinidad

IP Address Categorization

$
0
0

Hi,

We are found on our URL use reports a large use of Bandwith of on IP Addresses that is Uncategorized by Websense.

My Question is, Websense use to categorize IP Addresses by reputation, or only URLs?

Can I suggest IP Addresses recategorization useing Websense Lookup Tool?

Configuring Mobile Agent

$
0
0

I'm working on setting up the Mobile Agent so we can use DLP for Activesync.  The installation instructions are pretty straight forward and did have any issues with the setup.  The only problem I'm having is the instuctions say nothing about the mobile connections.  

Does the Mobile Agent require a NAT ip so we can access it from the outside or do the clients still connect to the exchange server as they always did?


Websense Endpoint Client 8.0.2076

$
0
0

We have Websense endpoint client version 8.0.2076 and Cloud Web product.

Notice that all our clients are now trying to connect to some sort of Endpoint update service "epevents.blackspider.com"on IP 85.115.54.169. It tries to connect directly so hits our Firewall and gets blocked

Anyone know what this is or what data its trying to post up to the cloud ?

 

 

Cloud Web Endpoint

$
0
0

Anyone installed the endpoint agent as part of a system build? Interested to know if it works on Win 7,8&10 as part of a build

Can I run snapshot manually with CLI?

$
0
0

Normal 0 false false false EN-US X-NONE HE MicrosoftInternetExplorer4

Hi,

Can I run snapshot on the CLI, backup and restore?

I  need to run in with crontad  for export it to outside server.

I’m using software installation.

 

Meaning of Action taken

$
0
0

Hi All,

 

Please let me know actually what happened in below mentioned two scenarios

Scenario 1: Action in the report is "Confirmed", direction "unknown", Category is "Malicious Websites" and action configured is "Block Access".

Is the malicious website got accessed by the user or it got blocked?

Scenario 2:

Action in the report is "Blocked", direction "Outbound", Category is "Malicious Websites", URL is "differentia.ru", policy is "Test", action configured is "Block Access".
Action in the report is "Authentication Required", direction "unknown", Category is "Malicious Websites", URL is "differentia.ru", policy is "Test", action configured is "Block Access".

Is the malicious website got accessed by the user or it got blocked?

Running websense 7.8.1, site requires TLS v1.1 or 1.2

$
0
0

User can't access site because 7.8.1 only supports TLS 1.0 and the site requires 1.1 at minimum.

Is there anything I can do to get them access to the site?  Browser is IE10 and all versions of TLS are supported.

 

 

BSOD on Windows 2008 R2 with Triton

$
0
0

Hi all.

I have built a new server to run our Triton Web Server to replace our old one which is on Windows 2003.

The new server runs on VMware 5.1, its Windows 2008 R2, with TMG 2010 on there as well, along with Triton Websense, Web Security Build 7.8.4.1390

The machine works great, however when I deploy it to my organisation it will after a little while Blue Screen, with the following error.

Page Fault in Non Paged Area. fwpclnt.sys.

Now I have built loads of guests on VMware and this is the only one we have that gets the BSOD. The server is fully patched and I have another server virtually identical, but without the Triton software and this does NOT have the same issue.

Has anyone got any experience of such an event? I have considered deploying Windows 2012 R2 and re building but TMG does not install on that platform.

Someone must be running the same but not having my issue?

Help!!!!!

 

Filtering Service not showing up in Triton

$
0
0

Hey all,

I've set up a RHEL CGW with FIltering Service (firstly installed Filtering Service, then CGW). I've downloaded both from mywebsense.com so they should be the latest version. In the end, this server should really just be a Proxy for one of our affiliates which has bad performance to the Web-Cluster of Websense.

What happens now is that only CGW is showing up in Triton under "Deployment", but not the filtering service. Therefore I can't assign the filtering service to the Filtered Location. 

As I do see the CGW there, I doubt that there is an network issue between the Policy Server (Triton) and my new CGW. Also if I enter the proxy hardcoded to my machine, I can surf through the new CGW, it's just not showing up in Triton.

What I already tried:

-Re-Install Filtering/CGW (in different order, none of them worked, so I remained with the one from the documentation)

-Restarting CGW / Triton (multiple times, both)

-Reaching out to Support.

Did anybody do the same, maybe even with success? Would be nice if you could advice me.

Thanks and BR

Michael

 


Websense 8.1 Web Filter & Security Database Names

$
0
0

Hello,

Could someone tell me what the default catalog, partition, and threats partitions database names are in Websense 8.1 Web Filter & Security ?

Are they named the same as prior Websense Web Filter & Security versions: wslogdb70, wslogdb70_x and wslogdb70_amt_1.

 

Thank You

Frank

PEM site can't be reached

$
0
0

We have just enabled PEM in our internal environment but when we click on "Deliver" or "login to you personal email manager port" we get "Site Cannot be reached" with what I believe is the correct link.  This did work when we first set up websense but since we enabled it it does not seem to work.  

EndPoint Web-AP with Windows 10

$
0
0

Hi,

I'm testing Windows 10 Ent. I install Websense Endpoint  but the Websense icon does not display in the System tray. Result log in credential does not pass through the Websense Web AP. 

I guess this is because Websense Endpoint does not support on Windows 10. Is anyone experience this issue? any suggestion is much appreciated.

Peter.

 

Blocked Website

$
0
0

I have blocked a page of a website for the majority of my users except a couple. I blocked by using Exceptions under policy management and with the 'Specific clients in any role' selected the two groups the majority of my users are in and it has blocked the site OK.

Unfortunately it has blocked all users even if they are not in the specific clients so the few users I'm allowing are also blocked. If I use the test filtering option it says I'm correct, i.e. most users are blocked and the few that don't want blacked are not. BUT when I test it on a PC everyone is blocked.

Any clues?

Consolidating multiple systems to one

$
0
0

We are undergoing a datacenter consolidation. Part of that is consolidating all our Websense systems to one central management for Triton. We want to consolidate System 1 and 2 into one system on System 3. Any ideas anybody might have are welcome. Especially with the DLP endpoints.

System 1 on DomainA.com  - v8.1

Server1 - Triton, Web Sec, DLP

Server2 - DLP (primary for endpoints)

1 - V10000 appliance - Web

1000+ Remote Filtering Client/DLP endpoints

System 2 on DomainB.com - v7.8.4

Server1 - Triton, Web Sec, DLP

2 - v10000 appliances - Web

1 - v5000 appliance - Web (can't upgrade to 8.1 Sad )

1000+ Remote filtering clients (no DLP)

System 3 on DomainC.com - v8.1 (New)

Server1 - Triton, Web Sec, DLP

Server 2 - DLP

 

Viewing all 2011 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>