TRITON - Web Security Help, Version 7.7 - Websense

Scanning and SSL Decryption Bypass OptionsSecurity threats: File analysis, page 194, applies 2 methods of inspection to detectsecurity threats.• Websense Advanced Detection to discover malicious content, such asviruses, Trojan horses, and worms, returning a threat category for policyenforcement.• Traditional antivirus (AV) definition files to find virus-infected files.When either Advanced Detection or Antivirus Scanning is enabled, you can alsooptionally analyze:• Rich Internet applications, such as Flash files, to detect and block maliciouscontent.• FTP files to detect and block malicious content.The File Type Options settings determine which types of files are analyzed formalicious content, including executable and unrecognized files. Individual fileextensions may also be specified.Outbound security, page 196, provides 2 types of outbound analysis. The firstperforms outbound content analysis that mirrors your inbound Security Threatscontent analysis and file analysis configuration. The second performs data theftanalysis, looking for and blocking outbound custom encrypted files, passwordfiles, and other sensitive data.The Content Categorization and Scanning Sensitivity control allows you totune the Content Categorization and Content Analysis sensitivity thresholds(Advanced options, page 197).For large, streaming, or slow transactions, the Content Delay Handling optionprovides some control over how long to wait before releasing a portion ofbuffered content to the client (Advanced options, page 197).The Scanning Timeout, File Size Limit and Content Stripping AdvancedOptions apply to all traffic transiting the proxy (Advanced options, page 197).Several presentation reports can provide details about how advanced analysis featuresprotect your network from attempts to access sites containing threats. See Reportingon scanning activity, page 202.SSL decryption bypass options support the specification of clients, Web sites, andWeb site categories that are not subject to decryption and analysis as they flowthrough the proxy. These options apply only if SSL Manager is enabled in ContentGateway. See SSL decryption bypass, page 205.Scanning exceptions are lists of hostnames or URLs that are always analyzed ornever analyzed. The type of analysis to always or never perform is specified perhostname/URL or group of hostnames/URLs. A list of client IP addresses whosecontent is never analyzed can also be specified. See Scanning exceptions, page 199.Enabling scanning and SSL decryption bypass featuresTRITON - Web Security Help | Web Security Solutions | Version 7.7.xTo enable the scanning advanced analysis and SSL decryption bypass features that areavailable with Websense Web Security Gateway and Gateway Anywhere, an188 Websense Web Security Gateway