TRITON - Web Security Help, Version 7.7 - Websense

Refine Filtering PoliciesThe following tables provide examples of valid and invalid protocol definitions:Port IP Address TransportMethodAcceptedcombination?70 ANY TCP Yes - the port number90 ANY TCPmakes each protocolidentifier unique.Port IP Address TransportMethodAcceptedcombination?70 ANY TCP No - the IP addresses are70 10.2.1.201 TCPnot unique. 10.2.1.201 isincluded in the “ANY” set.Port IP Address TransportMethodAcceptedcombination?70 10.2.3.212 TCP Yes - the IP addresses are70 10.2.1.201 TCPunique.4. Under Default Filtering Action, specify the default action (Permit or Block) thatshould be applied to this protocol in all active protocol filters:• Indicate whether traffic using this protocol should be Logged. Protocol trafficmust be logged to appear in reports and enable protocol usage alerts.• Indicate whether access to this protocol should be regulated by BandwidthOptimizer (see Using Bandwidth Optimizer to manage bandwidth, page279).5. When you are finished, click OK to return to the Edit Protocols page. The newprotocol definition appears in the Protocols list.6. Click OK again to cache your changes. Changes are not implemented until youclick Save and Deploy.Adding to a Websense-defined protocolTRITON - Web Security Help | Web Security Solutions | Version 7.7.xYou cannot add a port number or IP address directly to a Websense-defined protocol.You can, however, create a custom protocol with the same name as the Websensedefinedprotocol, and then add ports or IP addresses to its definition.When a custom protocol and a Websense-defined protocol have the same name,Websense software looks for protocol traffic at the ports and IP addresses specified inboth definitions.In reports, custom protocol names have a “C_” prefix. For example, if you created acustom protocol for SQL_NET and specified additional port numbers, reports displayC_SQL_NET when the protocol uses the port numbers in the custom protocol.278 Websense Web Security Solutions