TRITON - Web Security Help, Version 7.7 - Websense

Configure Hybrid FilteringUse the HTTPS Notification Pages section to enable users making HTTPS requeststo view the appropriate Websense notification pages (see Enabling HTTPSnotification pages, page 224).If hybrid filtering uses directory data collected by Websense Directory Agent toidentify users, you can configure hybrid passwords for user accounts on the HybridConfiguration > Shared User Data page in TRITON - Web Security (see Send userand group data to the hybrid service, page 227). If your organization does not usedirectory data collected by Directory Agent to identify users connecting to the hybridservice from outside filtered locations, you can let users self-register for the service.This allows users with email accounts associated with domains that you specify underRegistered Domains to identify themselves to the hybrid service.Users requesting Internet access from an unrecognized IP address are prompted toself-register. The domain portion of the user’s email address is used to associate theuser with your organization so that the proper Default policy is applied.Users who cannot be associated with an organization are filtered by the hybrid serviceDefault policy. Click Add to add a domain (see Adding domains, page 222).Click a domain entry to edit the domain or its attributes (see Editing domains,page 223).You can also apply hybrid filtering to off-site users connecting from unknown IPaddresses, regardless of how those users are filtered when they are in-network orconnecting from a filtered location. Under Off-site Users, mark Enable hybridfiltering of off-site users.If you clear this check box, any user connecting from an unknown IP address will notbe filtered.See Applying hybrid filtering to off-site users, page 250 for more information.Adding domainsTRITON - Web Security Help | Web Security Solutions | Version 7.7.xUse the User Access > Add Domain page to identify the domains and subdomains (ifany) belonging to your organization. This makes it possible for users with emailaddresses in the specified domains to self-register (authenticate themselves) for hybridfiltering. This is typically enabled only in organizations that do not use DirectoryAgent to send user information to hybrid filtering.The hybrid service is unable to provide user name information about self-registeredusers to the on-premises components for use in reporting. Only the IP address fromwhich the request originated is logged.1. Enter a Domain name (in the format sampledomain.org) belonging to yourorganization.2. Enter a clear Description of the domain as a point of reference to simplify hybridfiltering administration.222 Websense Web Security Gateway Anywhere