Hi everyone. I've been using Websense to filter/monitor the 200+ users here for several years and this Triton v7.5 is just about to p!ss me off. I have Websense running on a Windows 2003 server in an AD environment with port-mirroring on the switch to run the filtering/monitoring with no appliance or other device in the mix.
I am able to filtering most of the other crap people try to get to (shopping, adult material, gambling, etc) but Gmail and Yahoo mail have become my nemesis. So far I have added these url's (I'm typing them exactly as I have them in the category) to the "Internet Communication" > "General Email" which everyone is blocked except a couple of users are blocked from.
I've checked the membership in the group that is excluded from being blocked and the users which should be blocked are not.
- http://accounts.google.com
- http://mail.google.com
- https://accounts.google.com
- https://mail.google.com
I then added these under Regular Expressions in the same category.
- 74.125
- 74.194
- accounts.google.com
- https://accounts.google.com
- mail.google.com
- mail.yahoo.com
Somehow when i test the user's access, they can get to the https://accounts.google.com site although the site looks very generic. The computer's IP is not in a separate policy.
The last part of this craziness is that the logs on testlogserver show (SEARCH ENGINES AND PORTALS) > (Category Not Blocked). I'm guessing this has to do with allowing searches to be conducted on google.com(?)
HELP! I would love to prevent these jokers from getting past Websense and into Gmail/Yahoo. Thank you. (I have already tried several searches from related posts on this subject)