TRITON - Web Security Help, Version 7.7 - Websense

Configure Hybrid FilteringUse the Filtered Locations > Edit Filtered Locations page to change the way alocation filtered by the hybrid service is defined.1. If you make changes to the location Name, make sure that the name remainsunique. The name must be between 1 and 50 characters long, and cannot includeany of the following characters:* < > { } ~ ! $ % & @ # . " | \ & + = ? / ; : ,Names can include spaces, dashes, and apostrophes.2. Enter or update the Description of the location.The character restrictions that apply to names also apply to descriptions, with 2exceptions: descriptions can include periods (.) and commas (,).3. Verify the Time zone of this location to ensure accurate policy enforcement.4. Verify the method used to define this location: by IP address, IP address Range,or Subnet.If you are entering or editing a subnet, specify whether it is identified by By bitrange (CIDR) or By subnet mask, and then select a bit range or mask.5. Update the external IP address, range, or subnet of the firewall or firewallsthrough which filtered clients at this location access the Internet.• For locations filtered by the hybrid service, these are external IP addresses,visible from outside your network, and not internal (LAN) addresses.ImportantDo not enter private IP addresses (in the ranges 10.0.0.0 -10.255.255.255, 172.16.0.0 - 172.31.255.255, and192.168.0.0 - 192.168.255.255) to identify locationsfiltered by the hybrid service. Because these addresses arenot visible from outside your network, and are used withinmultiple local area networks, the hybrid service does notaccept private IP addresses as valid entries.If the proxy mode for this location is Transparent orExplicit, you can enter private IP addresses.• These never include the IP address of the Content Gateway machine. TheContent Gateway is used only by the on-premises portion of your Websensesoftware.• External IP addresses must be unique to your organization, not shared withany other entity, so that the hybrid service is able to associate requestsoriginating from these locations with the policies belonging to yourorganization.If a filtered location is already associated with one organization, and a secondorganization adds the same IP address as a filtered location, hybrid filteringmay be temporarily suspended for the second organization, until the conflictis resolved.214 Websense Web Security Gateway Anywhere