13.07.2015 Views

TRITON - Web Security Help, Version 7.7 - Websense

TRITON - Web Security Help, Version 7.7 - Websense

TRITON - Web Security Help, Version 7.7 - Websense

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Filter Users Off SiteUsing remote filtering software<strong>TRITON</strong> - <strong>Web</strong> <strong>Security</strong> <strong>Help</strong> | <strong>Web</strong> <strong>Security</strong> Solutions | <strong>Version</strong> <strong>7.7</strong>.xRelated topics: When server communication fails, page 247 Configuring Remote Filtering settings, page 248By default, remote filtering software components monitor HTTP, SSL, and FTP trafficand apply a user-based policy or the Default policy. Remote filtering software doesnot apply policies to IP addresses (computers or network ranges).Bandwidth-based filtering is not applied to remote filtering clients, and bandwidthgenerated by remote filtering traffic is not included in bandwidth measurementsand reports.Remote filtering software can only block or permit FTP and SSL (HTTPS)requests. FTP and HTTPS sites in categories assigned the quota or confirm actionare blocked when the user is outside the network.While remote filtering software always monitors HTTP traffic, you can configureit to ignore FTP traffic, HTTPS traffic, or both. See Configure remote filtering toignore FTP or HTTPS traffic, page 249.Remote filtering software includes the following components:Remote Filtering Server is installed inside your network’s outermost firewall,and configured so that filtered machines outside the network can communicatewith it.Remote Filtering Client is installed on Microsoft Windows machines that areused outside the network.NotesFollow the recommendations in the Deployment andInstallation Center carefully to deploy these components.See the Remote Filtering Software technical paper forinstructions on installing them.All communication between Remote Filtering Client and Remote Filtering Server isauthenticated and encrypted.By default, when an HTTP, SSL, or FTP request is made from a machine with RemoteFiltering Client installed:1. The client first determines whether or not it is inside the network by sending aheartbeat to the Remote Filtering Server in the DMZ.246 <strong>Web</strong>sense <strong>Web</strong> <strong>Security</strong> Solutions

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!