13.07.2015 Views

TRITON - Web Security Help, Version 7.7 - Websense

TRITON - Web Security Help, Version 7.7 - Websense

TRITON - Web Security Help, Version 7.7 - Websense

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

TroubleshootingIf a DC Agent alert appears, see DC Agent has insufficient permissions, page 465, andDC Agent unable to access required file, page 466. These articles provide instructionsfor ensuring that DC Agent has the required permissions and network access tocomplete the domain discovery process and create the dc_config.txt file.I cannot add users and groups to <strong>TRITON</strong> - <strong>Web</strong> <strong>Security</strong><strong>TRITON</strong> - <strong>Web</strong> <strong>Security</strong> <strong>Help</strong> | <strong>Web</strong> <strong>Security</strong> Solutions | <strong>Version</strong> <strong>7.7</strong>.xBeing unable to see the list of users and groups when you attempt to add clients into<strong>TRITON</strong> - <strong>Web</strong> <strong>Security</strong>, can be caused by a variety of problems. Check the followingtopics, and check the Knowledge Base for additional information. Directory service connectivity and configuration, page 468 Directory service configuration in <strong>TRITON</strong> - <strong>Web</strong> <strong>Security</strong>, page 469 User identification and Windows Server 2008, page 469Directory service connectivity and configuration<strong>TRITON</strong> - <strong>Web</strong> <strong>Security</strong> <strong>Help</strong> | <strong>Web</strong> <strong>Security</strong> Solutions | <strong>Version</strong> <strong>7.7</strong>.xMake sure that the <strong>Web</strong>sense User Service machine and your directory server arerunning, and able to communicate over the network. The default ports used fordirectory service communication are:139 NetBIOS communication: Active Directory389 LDAP communication: Active Directory, NovelleDirectory, Oracle (formerly Sun Java) Directory Server636 SSL port: Novell eDirectory, Oracle (formerly Sun Java)Directory Server3268 Active Directory3269 SSL port: Active DirectoryIn addition, consider the following:If you are using Windows Active Directory in mixed mode, and User Service runson a Windows Server 2008 machine, the account used to run User Service musthave administrative privileges on the directory. This may sometimes also berequired in other versions of Windows Server.To check or change the User Service account, see Changing DC Agent, LogonAgent, and User Service permissions, page 470.If you are running Active Directory in native mode, set the User Service to run asthe Local System account. No account should be assigned to the actual service.User Service connects to the directory with the administrator user name andpassword configured on the Settings > General > Directory Services > AddGlobal Catalog Server page in <strong>TRITON</strong> - <strong>Web</strong> <strong>Security</strong>.468 <strong>Web</strong>sense <strong>Web</strong> <strong>Security</strong> Solutions

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!