Web Security Deployment Guide (PDF) - Websense

General Deployment RecommendationsOne Logon Agent is required for each Filtering Service instance.One RADIUS Agent instance is required for each RADIUS server.Websense, Inc. recommends installing and running RADIUS Agent and theRADIUS server on separate machines. (The agent and server cannot have thesame IP address, and must use different ports.)In some environments, a combination of transparent identification agents may beappropriate within the same network, or on the same machine. See Combiningtransparent identification agents.Refer to the Installation Guide for transparent identification agent installationinstructions. See the Websense Manager Help for detailed configuration information.More information is also available in the Transparent Identification of Users technicalwhite paper.Combining transparent identification agentsWebsense software can be work with multiple transparent identification agents. Ifyour environment requires multiple agents, it is best to install them on separatemachines.eDirectory or RADIUS Agent can be installed on the same machine as FilteringService, or on a separate server on the same network.Running eDirectory Agent and DC Agent in the same deployment is notsupported.Table 6 lists supported combinations.CombinationTable 6 Deploying Multiple Transparent ID AgentsSamemachine?Samenetwork?Configuration requiredMultiple DC Agents No Yes Ensure that all instances of DCAgent can communicate withFiltering Service, and that theindividual DC Agents are notmonitoring the same domaincontrollers.Multiple RADIUSAgentsMultiple eDirectoryAgentsMultiple LogonAgentsNo Yes Configure each agent tocommunicate with Filtering Service.Multiple instances of the RADIUSAgent cannot be installed on thesame machine.No Yes Configure each instance tocommunicate with Filtering Service.No Yes Configure each instance tocommunicate with Filtering Service.32 Websense Web Security and Websense Web Filter