TRITON - Web Security Help, Version 7.7 - Websense

Internet Filtering PoliciesPrioritizing group and domain policiesTRITON - Web Security Help | Web Security Solutions | Version 7.7.xIn some cases, organizations may prefer that directory policies (applied to users,groups, and domains) take precedence over policies applied to IP addresses(computers and networks).This might occur, for example, if group-based policies are used widely in theorganization, and the Account Override option (see Account override, page 86) isapplied to IP addresses in the network. When the default filtering precedence isapplied, the IP address-based policy overrides any group-based policies, which couldcause account override to fail frequently. When group and domain policies takeprecedence, the problem is avoided.You can configure Websense Filtering Service to prioritize directory policies (in otherwords, use the search order User > Group > Domain > Computer > Network toidentify the policy to apply to a request).When Filtering Service is installed on a Windows or Linux server:1. Navigate to the Websense bin directory on the Filtering Service machine(C:\Program Files (x86)\Websense\Web Security\bin or /opt/Websense/bin/, bydefault).2. Open the eimserver.ini file in a text editor.3. Locate the [FilteringManager] section of the file, and add the followingparameter:UserGroupIpPrecedence=true4. Save and close the file.5. Restart Filtering Service.• Windows: Use the Windows Services tool to restart Websense FilteringService.• Linux: Use the /opt/Websense/WebsenseDaemonControl command to restartFiltering Service.When Filtering Service is on a Websense appliance:1. Log on to the Appliance manager.2. Navigate to the Administration > Toolbox page.3. In the Appliance command line section, under Command Line Utility, clickLaunch Utility.4. Select Websense Web Security from the Module drop-down list.5. Enter user-group-ip-precedence in the Command field.6. Enter enable in the Action field, then click Run.• Filtering Service is stopped and restarted automatically to implement thechange.TRITON - Web Security Help 99