Web Security Deployment Guide (PDF) - Websense

General Deployment Recommendations[root@localhost root]# ping 11.22.33.254PING 11.22.33.254 (11.22.33.254) 56(84) bytes of data.64 bytes from 11.22.33.254: icmp_seq=2 ttl=127 time=0.417 ms64 bytes from 11.22.33.254: icmp_seq=3 ttl=127 time=0.465 ms64 bytes from 11.22.33.254: icmp_seq=4 ttl=127 time=0.447 ms64 bytes from 11.22.33.254: icmp_seq=1 ttl=127 time=0.854 msEnsure that Maximum round trip time or the value of time=x.xxx ms is fewer than 30ms. If the time is greater than 30 ms, move one of the components to a differentnetwork location and run the ping test again. If the result is still greater than 30 ms,locate and eliminate the source of the slow response.Required external resourcesWebsense software relies on certain external resources to function properly in yournetwork.TCP/IP: Websense software provides filtering in TCP/IP-based networks only. Ifyour network uses both TCP/IP and non-TCP protocols, only those users in theTCP/IP portion of your network are filtered.DNS server: A DNS server is used to resolve requested URLs to an IP address.Websense software or your integration product requires efficient DNSperformance. DNS servers should be fast enough to support Websense filteringwithout becoming overloaded.Directory services: If Websense software is configured to apply user- and groupbasedpolicies, User Service queries the directory service for user information.Although these users and group relationships are cached by Websense software,directory service machines must have the resources to rebuild the cache rapidlyWebsense software requests user information. See Supported directory services.Network efficiency: The ability to connect to resources such as the DNS serverand directory services is critical to Websense software. Network latency must beminimized if Filtering Service is to perform efficiently. Excessive delays underhigh load circumstances can impact the performance of Filtering Service and maycause lapses in filtering. See the Deploying in a Distributed Enterprisesupplement to this guide for tips on improving network communication.Supported directory servicesIf your environment includes a directory service, you can configure Websensesoftware to filter Internet requests based on policies assigned to users, groups, anddomains (organizational units).Websense software can work with the following directory services:Windows NT Directory and Windows Active Directory (Mixed Mode)Windows Active Directory (Native Mode)30 Websense Web Security and Websense Web Filter