Hide thumbs Also See for V10000:

Advertisement

Quick Links

Getting Started

®
Websense
V10000 Appliance
v 1 . 2

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the V10000 and is the answer not in the manual?

Questions and answers

Summary of Contents for websense V10000

  • Page 1: Getting Started

    Getting Started ® Websense V10000 Appliance v 1 . 2...
  • Page 2 Websense, Inc. Every effort has been made to ensure the accuracy of this manual. However, Websense, Inc., makes no warranties with respect to this documentation and disclaims any implied warranties of merchantability and fitness for a particular purpose. Websense, Inc., shall not be liable for any error or for incidental or consequential damages in connection with the furnishing, performance, or use of this manual or the examples herein.
  • Page 3: Table Of Contents

    Configure the V10000 ........
  • Page 4 Contents Websense V10000...
  • Page 5: Introducing The Websense V10000

    System administration, including patch management and backup and restore Events related to appliance configuration and patching are logged. The log entries can be viewed in the V10000 Console, or the entire log file can be downloaded for viewing. Command line interface for basic appliance settings, available through a USB...
  • Page 6: Windows Server 2003 Or 2008

    Introducing the Websense V10000 Windows Server 2003 or 2008 In addition to the V10000 appliance, you must have a separate server machine that meets the requirements listed below. This is the machine where you install Websense Manager (the configuration interface for Web filtering) and Log Server (the component that receives Internet activity information and processes it into the Log Database.)
  • Page 7: Directory Service

    MSDE 2000 SP4 - suitable for smaller networks The following recommendations apply to the machine running the database engine, especially if it runs on the same Windows server as Websense Manager and Log Server. You can improve I/O performance by installing the Log Database on a disk array running RAID level 1+0.
  • Page 8: Other

    Websense Deployment Guide. Deployment scenarios One or more Websense V10000 appliances can be deployed in a network, depending on the traffic volume and security goals. Review the diagrams and information for these deployment scenarios before implementing the V10000 in your network.
  • Page 9: Single Appliance Deployment

    Introducing the Websense V10000 Single appliance deployment When you deploy a single Websense V10000 appliance to host all major features, one additional Windows server is required to run Websense Manager and Log Server. Typically, they are deployed in the network as shown below.
  • Page 10: Multiple Appliance Deployment

    (that is, the policy source). It becomes the centralized source for policy and configuration information for the other appliances. To implement a multiple appliance deployment, configure the primary V10000 to use itself as the policy source. Then, configure all other V10000 appliances to use the Websense V10000...
  • Page 11: Implementing Clustering

    Implementing clustering To implement clustering with V10000 appliances, choose a dedicated clustering interface, and then add a route rule to specify that communications between Websense Content Gateway and the Clustering Multicast Group Address will go through the dedicated clustering interface. This process is described in detail in the Websense...
  • Page 12 Introducing the Websense V10000 Websense V10000...
  • Page 13: Setting Up The Websense V10000

    Setting up the Websense V10000 Setting up the Websense V10000 involves the following tasks, which are detailed in this chapter. Set up the appliance hardware, page 13 Perform initial command line configuration, page Configure the V10000, page Install Websense Manager and Log...
  • Page 14: Perform Initial Command Line Configuration

    Tertiary DNS server for network interface C (IP address) Optional Unified password to be used for the three consoles: V10000 Console, Websense Manager, and Content Manager. (8 to 15 characters, at least 1 letter and 1 number) When you have gathered the necessary information, run the initial command line configuration, as follows.
  • Page 15: Configure The V10000

    V10000 administration tasks. After completing the initial configuration required by the firstboot script, use the V10000 Console to configure important settings for network interfaces N and P1 (and optionally P2), which are used for communications by Network Agent and Websense Content Gateway.
  • Page 16 The following procedure summarizes the settings that must be configured to enable default proxy caching and filtering. See the V10000 Console Help for detailed instructions on any field or area, or for information about other available settings. Open a supported browser, and enter the following URL in the address bar: https://<IP address>:9447/appmng...
  • Page 17 Use the Edit and Delete buttons to modify existing routes, as needed. In the left navigation pane, click Configuration > Policy Source. Specify the location of Websense Web Security policy information. • Choose This V10000 appliance if the policy for your deployment is located on the V10000 being configured. Getting Started...
  • Page 18: Install Websense Manager And Log Server

    (If the policy source is another V10000 appliance that is configured as primary, enter the IP address of its network interface C.) Click Save. Click Log Off, at the top right, to log off the Websense V10000 Console. Configure Websense Content Gateway for default operation. See Configure...
  • Page 19 Database password The following procedure summarizes the steps required to install the required components. See the Websense Installation Guide for more detailed instructions. Log on to the installation machine with administrative privileges. If you will use a Windows trusted connection to communicate with the database engine, your logon user account must also be a trusted account with local administration privileges on the database machine.
  • Page 20 Setting up the Websense V10000 In the list of components, mark the check boxes for Log Server and Websense Manager and any other optional components to be installed on this machine. Important If you change the policy source (machine running Policy...
  • Page 21 Consolidating Log Records—Select this option to combine multiple visits by the same user to the same Internet domain (see Websense Manager Help for details about how records are combined). This selection creates a smaller database, but decreases reporting precision.
  • Page 22: Add Or Install Optional Components

    If you stopped your anti-virus software, restart it. Add or install optional components In addition to the Websense V10000 appliance and the separate Windows server that runs Websense Manager and Log Server, you may choose to install individual Websense Web Security components on separate machines in your network.
  • Page 23: Configure Websense Manager

    Use the following steps to configure default filtering. On the installation machine, launch Websense Manager by double-clicking the Websense Manager desktop icon, or going to Start > Programs > Websense > Websense Manager. Access to Websense Manager is secured with an SSL security certificate issued by Websense, Inc.
  • Page 24 The Master Database, which contains the category and protocol definitions that provide the basis for Internet filtering, begins to download automatically. If Websense software must go through a proxy to perform the download, also use the Settings > Database Download page to configure proxy settings (see Websense Manager Help for instructions).
  • Page 25: Special Directory Service Considerations

    Save All. These are the steps required to configure Websense Web Security so that the Websense V10000 is ready for default operations. See the Websense Manager Help for details on the variety of features and options available for Websense Web Security.
  • Page 26 Setting up the Websense V10000 If your network uses Windows NT Directory or Active Directory (Mixed Mode): In Websense Manager, go to the Settings > Directory Service page. Select Windows NT Directory / Active Directory (Mixed Mode), which is the default.
  • Page 27: Configure Websense Content Gateway

    An SSL connection is used for secure, browser-based communication with Content Manager. This connection uses a security certificate issued by Websense, Inc. Because the supported browsers do not recognize Websense, Inc., as a known Certificate Authority, a certificate error is displayed when you launch Content Manager in a new browser session.
  • Page 28: Test And Refine Your Policies

    After performing the procedures outlined in this document, run the following tests to verify that the system is configured and operating properly. Go to another computer in the network that is monitored by the Websense V10000 appliance. Open a Web browser, and browse to several different sites to generate Internet traffic.
  • Page 29: Recovering The V10000 Appliance

    Insert the recovery disk into the drive. Be sure to use the Websense recovery disk shipped with the appliance model you are recovering. Reboot the V10000. (An alternative is to turn off the power, and then turn it on again.) When the list of function keys appears during reboot, press F11, and then select Boot from IDE CD-ROM device.
  • Page 30: Logon Portal

    Restore the backed up configuration. Log on to the V10000 Console for the primary V10000 appliance. Go to Administration > Backup Utility. Restore the Websense Web Security configuration from the backup created earlier. See online Help for assistance.
  • Page 31: Online Help

    Advanced tab of the Tools > Internet Options interface. (Check Allow active content to run in files on My Computer under Security options.) Technical Support Technical information about Websense software and services is available 24 hours a day at: www.websense.com/support/ the latest release information...
  • Page 32 Location Contact information North America +1-858-458-2940 France Contact your Websense Reseller. If you cannot locate your Reseller: +33 (0) 1 5732 3227 Germany Contact your Websense Reseller. If you cannot locate your Reseller: +49 (0) 69 517 09347 Contact your Websense Reseller. If you cannot locate your Reseller: +44 (0) 20 3024 4401 Contact your Websense Reseller.

Table of Contents