TRITON - Web Security Help, Version 7.7 - Websense

Configure Hybrid Filtering1. If you make changes to the destination Name, make sure that the name remainsunique. The name must be between 1 and 50 characters long, and cannot includeany of the following characters:* < > { } ~ ! $ % & @ # . " | \ & + = ? / ; : ,Names can include spaces, dashes, and apostrophes.2. Enter or update the destination Description.The character restrictions that apply to names also apply to descriptions, with 2exceptions: descriptions can include periods (.) and commas (,).3. Verify the method used to define this destination: IP address, Domain, orSubnet.If you are entering or editing a subnet, specify whether you are identifying it byBy bit range (CIDR) or By subnet mask, and then select a bit range or mask.4. Update the IP address, domain, or subnet that you want users to be able to accesswithout sending the request to the hybrid service.5. Update the Proxy type that this unfiltered destination applies to.• Select Hybrid to enable all hybrid filtering users to access the destinationdirectly without sending a request to the hybrid service.• Select Explicit to enable all users in filtered locations using an on-premisesexplicit proxy to access the destination directly.• Select Hybrid and Explicit to enable all users filtered by the hybrid serviceand an on-premises explicit proxy from a filtered location to access thedestination directly.6. Click OK to return to the Unfiltered Destinations page, and then click OK againto cache your changes. Changes are not implemented until you click Save andDeploy.Configure user access to hybrid filteringTRITON - Web Security Help | Web Security Solutions | Version 7.7.xTo use hybrid filtering, you must configure how users connect to and are filtered bythe hybrid service. To do so, select Settings > Hybrid Configuration > User Access.The Proxy Auto-Configuration (PAC) File section shows the URL from whichbrowsers on filtered users’ machines retrieve the PAC file (see What is a PAC file?,page 225).The PAC file defines which requests the browsers send to the hybrid service, andwhich are sent directly to the target site (see Specify sites not filtered by hybridfiltering, page 218). The PAC file also contains information about filtered locations,and the proxy configuration for any locations that filter their users through an explicit220 Websense Web Security Gateway Anywhere