Web Security Deployment Guide (PDF) - Websense

Deploying Network AgentFor examples of central and distributed Network Agent placement, see: Hub configuration, page 54 Switched networks with a single Network Agent, page 55. Gateway configuration, page 59Central Network Agent placementA network with multiple segments can be filtered from a single location. InstallFiltering Service where it can receive Internet requests from both the integrationproduct, if any, and each Network Agent.If the network contains multiple switches, Network Agent instances are inserted intothe network at the last switch in the series. This switch must be connected to thegateway that goes out to the Internet.In Figure 3: One Network Agent instance is installed with Filtering Service on Machine A.This machine is connected to the network via a switch that is configured to mirroror span the traffic of network Segment 1. A second Network Agent is installed on Machine B, which is connected to thesame switch as Machine A. Machine B is connected to a different port that isconfigured to mirror the traffic of Segments 2 and 3.Both Network Agents are positioned to see all traffic for the network segmentsthey monitor, and to communicate with other Websense components.The switch is connected to the gateway, allowing the Network Agent instances tomonitor network traffic for all network segments.Figure 3 Websense software in a multiple-segment network52 Websense Web Security and Websense Web Filter