Web Security Deployment Guide (PDF) - Websense

IntroductionComponentTable 1 Websense ComponentsDefinitionOptional Components1 • Offers transparent user identification for users in aDC AgentWindows-based directory service.• Polls domain controllers in the network to transparentlyidentify users.• Communicates with User Service to provide up-to-date userlogon session information to Websense software for use infiltering.1, 2 • Works with Novell® eDirectory to transparently identifyeDirectory Agentusers.• Gathers user logon session information from NovelleDirectory, which authenticates users logging on to thenetwork.• Associates each authenticated user with an IP address, andthen works with User Service to supply the information toFiltering Service.1 •Logon AgentProvides unsurpassed accuracy in transparent useridentification in Linux and Windows networks.• Does not rely on a directory service or other intermediarywhen capturing user logon sessions.• Detects user logon sessions as they occur.Logon Agent communicates with the logon application on clientmachines to ensure that individual user logon sessions arecaptured and processed directly by Websense software.Logon Application Runs from a logon script on a domain controller to capture logonsessions as users log on to, or log off of, Windows domains inthe network. The application, LogonApp.exe, identifies theuser and sends the information to the Logon Agent.RADIUS Agent 1 Enables transparent identification of users who use a dial-up,Virtual Private Network (VPN), Digital Subscriber Line (DSL),or other remote connection to access the network.Remote Filtering Client • Resides on client machines outside the network firewall.• Identifies the machines as clients to be filtered.• Communicates with Remote Filtering Server, installedinside the organization’s firewall.Remote Filtering Server • Allows filtering of clients outside a network firewall.• Acts as a proxy that accepts requests from Remote FilteringClient and submits them for filtering.• Communicates with Filtering Service to provide Internetaccess management of remote machines.1. Websense, Inc. supports certain combinations of transparent identification agents within thesame network, or on the same machine. For more information, see Deploying transparentidentification agents, page 31.2. Running eDirectory Agent and DC Agent in the same deployment is not currently supported.Deployment Guide 13