configuring websense security gateway anywhere triton 7
TRANSCRIPT
web security | data security | email security © 2009 Websense, Inc. All rights reserved.
Support Webinars
Configuring Websense Security Gateway
Anywhere – Triton 7.5
TOPICS COVERED
New Today page graphs
Web 2.0 reports
Running/Reviewing reports in the background
Manager Configuration and SSO ( single sign on)
WCG Scanning Options
Hybrid Configuration
WebDLP Configuration
Proxy Authentication options
– XID vs. Proxy Authentication
2
Triton Web Security Manager
Still consists of two services ( Apache2Websense and ApacheTomcatWebsense )
Presentation Reports will automatically connect based on settings in mng.xml
“Today” page graphs load off this connection
Investigative Reports has its own separate connection via ODBC
3
Web & Data Managers
Each manager needs to be on its own windows server as each manager runs its own Apache service.
Web Reporting uses a SQL database, that does NOT come with the install package.
Data Reporting uses a Oracle database that does come with the install package.
Via the Linking Service usernames and URL categories are shared between the two managers.
The Linking Service is part of the Web Security install package
13
web security | data security | email security © 2009 Websense, Inc. All rights reserved.
Hybrid Configuration
web security | data security | email security © 2009 Websense, Inc. All rights reserved.
Configuring WebDLP (Data Loss Prevention)
WebDLP
What is WebDLP?
– WebDLP is a lite version of Websense Data Security applied over “web channels”
– WebDLP allows you to keep your companies secure information inside your network
– Websense Content Gateway now has the ability to analyze outbound web content for sensitive information• HTTP/HTTPS/FTP outbound analysis
• Covers POST & PUT packets, but not GET
– 2 main components• Content Gateway
• Triton - Data Security Manager
web security | data security | email security © 2009 Websense, Inc. All rights reserved.
New Proxy Features
37
Websense Content Gateway 7.5
New Features and Added Functionality to WCG 7.5
– Authentication options
– DNS functionality
– Proxy Chaining
– SSL functionality
XID vs Proxy Authentication
XID Agent
Involves an agent being
installed
Can be configured to
update on logon/logoff
Agent can be installed
only on windows OS.
MAC authentication is
only supported via Novell
eDirectory
Proxy Authentication
Runs directly off browser session, no extra install required
Does not detect exact logoff
Can authenticate any operating system
Can pick up session for terminal/citrix servers without the use of a plug-in
41
Support Online ResourcesKnowledge Base
– Search or browse the knowledge base for documentation, downloads, top knowledge base articles, and solutions specific to your product.
Support Forums
– Share questions, offer solutions and suggestions with experienced Websense Customers regarding product Best Practices, Deployment, Installation, Configuration, and other product topics.
Tech Alerts
– Subscribe to receive product specific alerts that automatically notify you anytime Websense issues new releases, critical hot-fixes, or other technical information.
• ask.websense.com
– Create and manage support service requests using our online portal.