TRITON - Web Security Help, Version 7.7 - Websense

Configure Hybrid FilteringSend user and group data to the hybrid serviceTRITON - Web Security Help | Web Security Solutions | Version 7.7.xIf your organization uses a supported, LDAP-based directory service—WindowsActive Directory (Native Mode), Oracle (Sun Java) Directory Server, or NovelleDirectory—you can collect user and group data and send it to the hybrid service. Thisis accomplished using 2 Websense components:Websense Directory Agent collects user and group information from DirectoryServer and collates it for hybrid filtering.Websense Sync Service transports policy, reporting, custom PAC fileinformation, and user/group data between the on-premises and hybrid systems.When hybrid filtering is configured properly, the information from Directory Agentcan be used to apply user- and group-based filtering.If your organization uses Windows Active Directory in mixed mode, user and groupdata cannot be collected and sent to the hybrid service.If hybrid filtering uses directory data collected by Directory Agent to identify users,you have 2 options:Configure the hybrid service to automatically create a hybrid logon password forall user accounts sent by Directory Agent. Passwords are sent to each user’s emailaddress in staggered intervals to avoid a sudden influx of email messages.Have users request their own password the first time they connect to the hybridservice from outside a filtered location. In order for the process to succeed, usersmust provide an email address that matches an account sent by Directory Agent.The password is then sent to that email address.For this reason, be sure that your organization’s webmail address has been addedas an unfiltered destination. See Specify sites not filtered by hybrid filtering, page218.Configure Directory Agent settings for hybrid filteringTRITON - Web Security Help | Web Security Solutions | Version 7.7.xSelect Settings > Hybrid Configuration > Shared User Data to review and edityour current Directory Agent configuration, and to configure Directory Agent tocommunicate with Sync Service.TRITON - Web Security Help 227