Web Security Deployment Guide (PDF) - Websense

More documents

Recommendations

Info

©1996–2008, Websense, Inc.All rights reserved.10240 Sorrento Valley Rd., San Diego, CA 92121, USAPublished 2008Printed in the United States of America and IrelandThe products and/or methods of use described in this document are covered by U.S. Patent Numbers 6,606,659 and 6,947,985 and other patentspending.This document may not, in whole or in part, be copied, photocopied, reproduced, translated, or reduced to any electronic medium or machinereadableform without prior consent in writing from Websense Inc.Every effort has been made to ensure the accuracy of this manual. However, Websense Inc., makes no warranties with respect to thisdocumentation and disclaims any implied warranties of merchantability and fitness for a particular purpose. Websense Inc. shall not be liable forany error or for incidental or consequential damages in connection with the furnishing, performance, or use of this manual or the examples herein.The information in this documentation is subject to change without notice.TrademarksWebsense and Websense Enterprise are registered trademarks of Websense, Inc. in the United States and certain international markets. Websensehas numerous other unregistered trademarks in the United States and internationally. All other trademarks are the property of their respectiveowners.Microsoft, Windows, Windows NT, Windows Server, Internet Explorer, and Active Directory are either registered trademarks or trademarks ofMicrosoft Corporation in the United States and/or other countries.Sun, Sun Java System, Sun ONE, and all Sun Java System based trademarks and logos are trademarks or registered trademarks of SunMicrosystems, Inc., in the United States and other countries.Mozilla and Firefox are registered trademarks of the Mozilla Foundation in the United States and/or other countries.eDirectory and Novell Directory Services are a registered trademarks of Novell, Inc., in the United States and other countries.Adobe, Acrobat, and Acrobat Reader are either registered trademarks or trademarks of Adobe Systems Incorporated in the United States and/orother countries.Pentium is a registered trademark of Intel Corporation.Red Hat is a registered trademark of Red Hat, Inc., in the United States and other countries. Linux is a trademark of Linus Torvalds, in the UnitedStates and other countries.Citrix, Citrix Presentation Server, and MetaFrame are trademarks or registered trademarks of Citrix Systems, Inc. and/or one or more of itssubsidiaries, and may be registered in the United States Patent and Trademark Office and in other countries.Cisco, Cisco Systems, Cisco PIX Firewall, Cisco IOS, Cisco Routers, and Cisco Content Engine are registered trademarks or trademarks of CiscoSystems, Inc., in the United States and certain other countries.Check Point, OPSEC, FireWall-1, VPN-1, SmartDashboard, and SmartCenter are trademarks or registered trademarks of Check Point SoftwareTechnologies Ltd. or its affiliates.Inktomi, the Inktomi logo, and Inktomi Traffic Server are registered trademarks of Inktomi Corporation.Network Appliance is a trademark and NetCache is a registered trademark of Network Appliance, Inc., in the U.S. and other countries.This product includes software distributed by the Apache Software Foundation (http://www.apache.org).Copyright (c) 2000. The Apache Software Foundation. All rights reserved.Other product names mentioned in this manual may be trademarks or registered trademarks of their respective companies and are the sole propertyof their respective manufacturers.
ContentsList of Figures . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5List of Tables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7Chapter 1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9Websense Components. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11Reporting Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14Chapter 2 General Deployment Recommendations . . . . . . . . . . . . . . . . . . . . . . 17Operating system requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18VMWare support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24Network considerations. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24System recommendations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25Deployment configurations. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25Component limits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26Component suggestions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27Network considerations. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27Network Agent suggestions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28Number of Filtering Services allowed per Policy Server . . . . . . . . . 28Required external resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30Supported directory services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30Deploying transparent identification agents. . . . . . . . . . . . . . . . . . . . . . 31Combining transparent identification agents. . . . . . . . . . . . . . . . . . . 32Maximizing system performance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33Network Agent . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34HTTP reporting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34Database Engine . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35Log Database disk space recommendations . . . . . . . . . . . . . . . . . . . 36Stand-Alone Edition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39Remote Filtering. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42Supported integrations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44Chapter 3 Deploying Network Agent . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47Network Agent . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47Network Agent settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48Network Agent location . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49Deployment Guide 3
Page 1: Deployment GuideWebsense ® Web Sec
Page 5: List of FiguresFigure 1, Example of
Page 8 and 9: List of Tables8 Websense Web Secur
Page 10 and 11: IntroductionA series of supplements
Page 12 and 13: IntroductionComponentTable 1 Websen
Page 14 and 15: IntroductionReporting ComponentsAll
Page 16 and 17: Introduction16 Websense Web Securi
Page 18 and 19: General Deployment RecommendationsO
Page 20 and 21: General Deployment RecommendationsT
Page 26 and 27: General Deployment Recommendationsd
Page 28 and 29: General Deployment RecommendationsF
Page 30 and 31: General Deployment Recommendations[
Page 32 and 33: General Deployment RecommendationsO
Page 34 and 35: General Deployment RecommendationsN
Page 36 and 37: General Deployment RecommendationsM
Page 38 and 39: General Deployment RecommendationsC
Page 40 and 41: General Deployment RecommendationsI
Page 42 and 43: General Deployment RecommendationsR
Page 44 and 45: General Deployment RecommendationsS
Page 46 and 47: General Deployment Recommendations4
Page 48 and 49: Deploying Network Agentinstances ma
Page 50 and 51: Deploying Network AgentSingle segme
Page 52 and 53:
Deploying Network AgentFor examples
Page 54 and 55:
Deploying Network AgentHub configur
Page 56 and 57:
Deploying Network AgentFigure 7 sho
Page 58 and 59:
Deploying Network AgentSwitched net
Page 60 and 61:
Deploying Network AgentFigure 11 sh
Page 62 and 63:
Deploying Network AgentFor informat
Page 64 and 65:
Integration DeploymentWebsense Cont
Page 66 and 67:
Integration DeploymentCisco Content
Page 68 and 69:
Integration DeploymentCheck PointSi
Page 70 and 71:
Integration Deploymentseparate proc
Page 72 and 73:
Integration DeploymentAn alternate
Page 74 and 75:
Integration DeploymentIf installing
Page 76 and 77:
Integration DeploymentAn alternate
Page 78 and 79:
Integration DeploymentIf installing
Page 80 and 81:
Integration DeploymentUniversal int
Page 82 and 83:
Integration Deployment82 Websense
Page 84 and 85:
eDirectory Agent, 31combined deploy
Page 86 and 87:
Ooperating systemscomponent support
Page 88:
88 Websense Web Security and Webse
show all

Web Security Deployment Guide (PDF) - Websense

Create successful ePaper yourself

Delete template?

Save as template?