TRITON - Web Security Help, Version 7.7 - Websense

ClientsIf, for example, users access the Internet from a kiosk machine, or from a machinewhere they log on using a local account, rather than a network account, administratorscan associate account override permissions with the computer or network (IP-addressbased)client.Account override permissions can also be given to directory clients (users, groups,and domains [OUs]).When user requests are blocked by the current policy, and account overridepermissions are assigned to the client being filtered (whether that is an IP address or adirectory client), the block page includes an Enter New Credentials button. The usercan then provide a user name and password.Once the user clicks Switch Credentials, Websense software identifies the policyassigned to the new account, then applies that policy to the request.If the new policy permits the request, the user can access the site.If the new policy blocks the request, the user sees another block page.In other words, unlike password override, using the account override option does notguarantee access to a blocked site. Instead, it changes the policy used to filter therequest.The new policy is applied to additional requests on that machine for the time periodspecified on the Settings > General > Filtering page (5 minutes, by default). SeeConfiguring Websense filtering settings, page 68.ImportantIn multiple Filtering Service deployments, Websense StateServer is required for correct allocation of accountoverride time. See Policy Server, Filtering Service, andState Server, page 379, for more information.If, after successfully switching credentials, the user wants to leave the machine beforethe account override period has ended, the override session can be ended manually byentering the following URL:http://:15871/cgi-bin/cancel_useraccount_overrider.cgiTRITON - Web Security Help 87