TRITON - Web Security Help, Version 7.7 - Websense

Refine Filtering Policiesnature of the data. By default, blocking a port intercepts all Internet content enteringyour network over that port, regardless of source.NoteOccasionally, internal network traffic sent over a particularport may not be blocked, even though the protocol usingthat port is blocked. The protocol may send data via aninternal server more quickly than Network Agent cancapture and process the data. This does not occur with dataoriginating outside the network.When a protocol request is made, Websense software uses the following steps todetermine whether to block or permit the request:1. Determine the protocol (or Internet application) name.2. Identify the protocol based on the request destination address.3. Search for related port numbers or IP addresses in custom protocol definitions.4. Search for related port numbers, IP addresses, or signatures in Websense-definedprotocol definitions.If Websense software is unable to determine any of this information, all contentassociated with the protocol is permitted.Editing custom protocolsTRITON - Web Security Help | Web Security Solutions | Version 7.7.xRelated topics: Working with protocols, page 272 Creating a custom protocol, page 277Creating a protocol filterEditing a protocol filterWorking with categoriesUse the Policy Management > Filter Components > Edit Protocols page to createand edit custom protocol definitions, and to review Websense-defined protocoldefinitions. Websense-defined protocols cannot be edited.The Protocols list includes all custom and Websense-defined protocols. Click on aprotocol or protocol group to get information about the selected item in the right-handportion of the content pane.To add a new, custom protocol, click Add Protocol, and then continue with Creatinga custom protocol, page 277.274 Websense Web Security Solutions