background image

Introducing Websense V-Series Appliances

 Websense V-Series Appliances

Security Modes

Websense V-Series appliances can run in any one of the following security modes. 

Websense V10000 G2 and V10000 G3 appliances:

Websense V5000 G2 appliances:

You choose the security mode of an appliance during initial 

firstboot

 configuration. 

See 

Perform initial command-line configuration

 for more information about 

firstboot

.

Choosing a security mode in 

firstboot

 does not automatically enable the associated 

features. The features become fully enabled only when you enter a valid subscription 
key in the TRITON Unified Security Center. See 

TRITON Unified Security Center

 for 

more information.

Once firstboot has been completed, if you want to change the security mode of an 
appliance, you must first restore it to its factory image. Then, run firstboot after re-
imaging, and select a different security mode. See 

Restoring to Factory Image

.

It is always a best practice to perform a full backup of the appliance and of each 
module prior to restoring to factory image. Note that if you change the security mode 
of an appliance after backing it up, the backup may or may not be applicable to the 
new mode. For example, you cannot restore from a backup file taken from Web 
Security (no proxy) to an appliance running Web Security Gateway (includes proxy).

Security mode

Module name

Web

Web Security Gateway / Anywhere

Email

Email Security Gateway / Anywhere

Web and Email

Web Security Gateway / Anywhere and Email 
Security Gateway / Anywhere

Web Security and Email Security Gateway / 
Anywhere

Security mode

Module name

Web

Web Security

Web Security Gateway / Anywhere

Email

Email Security Gateway / Anywhere

Web and Email

Web Security and Email Security Gateway / 
Anywhere

Содержание V10000 G2

Страница 1: ...Getting Started v7 6 1 and higher v7 6 x Websense V Series Appliance V10000 G2 V10000 G3 and V5000 G2...

Страница 2: ...rks of Intel Corporation This product includes software developed by the Apache Software Foundation www apache org Copyright c 2000 The Apache Software Foundation All rights reserved Other product nam...

Страница 3: ...3 Set up the appliance hardware 13 V10000 V10000 G2 and V10000 G3 hardware setup 13 V10000 V10000 G2 V10000 G3 Web mode with Web Security Gateway 14 V10000 G2 V10000 G3 Email mode 14 V10000 G2 and V10...

Страница 4: ...0 G2 Email mode 34 V10000 G2 and V10000 G3 Web and Email mode with Web Security Gateway 36 V10000 G2 and V10000 G3 Web and Email mode with Web Security 42 V5000 G2 Web and Email mode with Web Security...

Страница 5: ...figuration and network settings System administration tools for patch management troubleshooting and backup and restore Customization of subscribed features such as proxy caching Web filtering and ema...

Страница 6: ...nce you must first restore it to its factory image Then run firstboot after re imaging and select a different security mode See Restoring to Factory Image It is always a best practice to perform a ful...

Страница 7: ...n Service Network Agent Web Security Gateway If you configure Web Security Gateway during firstboot then your appliance also includes Websense Content Gateway On an appliance in Web mode only TRITON U...

Страница 8: ...ver are performed by off appliance components Software that runs off appliance The Websense components mentioned in this section must be installed off appliance Additionally Microsoft SQL Server must...

Страница 9: ...dpoint agent Printer agent The crawler Integration agent Email components The following Email Security Gateway components never run on the appliance They are Windows only components TRITON Email Secur...

Страница 10: ...Infrastructure is comprised of common user interface logging and reporting components required by the TRITON modules TRITON Infrastructure also optionally includes SQL Server 2008 R2 Express that may...

Страница 11: ...N Email Security is used to configure and manage general system properties administrator roles user directories email filtering email policies and Personal Email Manager end user facility options It i...

Страница 12: ...with your Websense subscription Refer to Microsoft documentation for installation and configuration instructions If you do not have SQL Server you can use the Websense Installer to install SQL Server...

Страница 13: ...iance hardware The Quick Start poster which comes in the appliance shipping box shows you all items included in each Websense appliance shipment The 2 page Quick Start poster explains how to set up th...

Страница 14: ...l databases are downloaded from Websense servers through these interfaces Ensure that E1 and E2 if used is able to access the download servers at download websense com Make sure the above address is p...

Страница 15: ...ion varies slightly depending on the security mode you choose for the appliance V5000 G2 Web mode with Web Security Gateway Network interface C must be able to access a DNS server This interface typic...

Страница 16: ...be able to access the mail server V5000 G2 Email mode Interface P1 and P2 if used must be able to access a DNS server These interfaces typically have continuous access to the Internet once the applian...

Страница 17: ...nse Web Security Web Security Gateway Web Security Gateway Anywhere Hostname example appliance domain com IP address for network interface C Subnet mask for network interface C Default gateway for net...

Страница 18: ...es using Web Security Gateway Email mode Appliance Manager Web and Email mode Appliance Manager Content Gateway Manager for sites using Web Security Gateway Integration method for this appliance for s...

Страница 19: ...ccess the Appliance Manager To reach the Logon Portal open a supported browser and enter this URL in the address bar http IP address Replace IP address with the address assigned to network interface C...

Страница 20: ...ateway Models V10000 G2 and V10000 G3 also offer expansion interfaces E1 and E2 that can be bonded with P1 and P2 respectively either for load balancing or active standby If you use the P2 interface t...

Страница 21: ...mask for network interface P2 Required only if P2 is enabled Subnet mask Choose interface for transporting blocking information for non HTTP and non HTTPS traffic interface C or interface N Choose on...

Страница 22: ...ime Protocol server Specify up to three NTP servers Use of an NTP server is recommended to ensure that database downloads and time based policies are handled precisely Full policy source IP address Th...

Страница 23: ...inbound traffic and P2 handles outbound traffic To enable this configuration be sure to set appropriate routing rules for P1 and P2 on the Configuration Routing page For example you might set outboun...

Страница 24: ...each Websense Content Gateway interface P1 and P2 independently You do not have to bond at all You do not have to bond both Also you can choose different bonding modes for P1 and P2 for example P1 E1...

Страница 25: ...erver can run in multiple locations Choose User directory and filtering if the appliance currently being configured is not the location of the policy information but will run Policy Server and User Se...

Страница 26: ...odule of the TRITON Unified Security Center Data Security or Email Security modules the TRITON Unified Security Center must be installed on a separate machine from the appliance In this case be sure t...

Страница 27: ...server for network interface N Optional IP address Full policy source IP address This appliance provides choose one Full policy source User directory and filtering you must specify the IP address of a...

Страница 28: ...select this option to enter a system time and date yourself c Click Save in the Time and Date area 5 In the left navigation pane click Configuration Network Interfaces 6 Under Network Agent Interface...

Страница 29: ...y Database for your deployment will run on the appliance being configured Only one appliance in the network runs these two components as well as the other filtering components Policy Server must also...

Страница 30: ...ty Center runs on this appliance TRITON Web Security is the Web Security module of the TRITON Unified Security Center For a Web Security deployment you can choose to run the TRITON Unified Security Ce...

Страница 31: ...Secondary NTP server domain Optional Domain Tertiary NTP server domain Optional Domain IP address for network interface E1 IP address Subnet mask for network interface E1 Subnet mask Default gateway...

Страница 32: ...ourself c Click Save in the Time and Date area 5 In the left navigation pane click Configuration Network Interfaces 6 Under Websense Email Security Gateway Interfaces E1 and E2 configure the E1 and E2...

Страница 33: ...and from the primary interface is balanced between the primary interface E1 and its bonded interface P1 c Click Save in the Expansion Interfaces P1 and P2 area To bond P2 to E2 Follow the instructions...

Страница 34: ...NTP server Optional Be sure that interface C can access the NTP server If interface C does not have Internet access you can install an NTP server locally on a subnet that can be accessed by interface...

Страница 35: ...Network Interfaces 6 Under Websense Email Security Gateway Interfaces P1 and P2 configure the P1 and P2 optional interfaces The P interfaces are used to accept users requests inbound traffic and commu...

Страница 36: ...r Email mode they cannot be bonded when the appliance is in Web and Email mode If you use the P2 interface the P1 interface is bound to eth0 and the P2 interface is bound to eth1 Keep this in mind whe...

Страница 37: ...nterface P2 Required only if P2 is enabled IP address Subnet mask for network interface P2 Required only if P2 is enabled Subnet mask Choose interface for transporting blocking information for non HTT...

Страница 38: ...a Set the time zone b Set the time and date Automatically synchronize with an NTP server select this option to use a Network Time Protocol server Specify up to three NTP servers Use of an NTP server...

Страница 39: ...nario P1 should not be used for outbound traffic For additional information on clusters see the Content Gateway Manager Help 7 Under Network Agent Interface N configure the N interface The N interface...

Страница 40: ...both E1 and E2 Note that default gateway and DNS configuration under Shared Setting are shared between both E1 and E2 b Click Save in the Websense Email Security Gateway Interfaces E1 and E2 area whe...

Страница 41: ...the full policy source a machine running Policy Broker If the full policy source is another appliance enter the IP address of its C network interface Choose Filtering only if the appliance being confi...

Страница 42: ...rface C Domain Secondary NTP server Optional Domain Tertiary NTP server Optional Domain Choose interface for transporting blocking information for traffic interface C or interface N If interface N tra...

Страница 43: ...in and the password set during initial appliance configuration 3 In the left navigation pane click Configuration System 4 Under Time and Date a Set the time zone b Set the time and date Default gatewa...

Страница 44: ...onitoring all the ports carrying the traffic of interest see your switch manufacturer s documentation for configuration instructions For non HTTP HTTPS protocols the N interface can also be used to se...

Страница 45: ...and module routes 9 Select the policy mode of this appliance a In the left navigation pane click Configuration Web Security Components b Specify the role of this appliance with respect to Websense Web...

Страница 46: ...11 Click Log Off at the top right when you are ready to log off Appliance Manager V5000 G2 Web and Email mode with Web Security After completing the initial configuration required by the firstboot sc...

Страница 47: ...d set during initial appliance configuration 3 In the left navigation pane click Configuration System 4 Under Time and Date a Set the time zone b Set the time and date Secondary DNS server for network...

Страница 48: ...onitoring all the ports carrying the traffic of interest see your switch manufacturer s documentation for configuration instructions For non HTTP HTTPS protocols the N interface can also be used to se...

Страница 49: ...and module routes 9 Select the policy mode of this appliance a In the left navigation pane click Configuration Web Security Components b Specify the role of this appliance with respect to Websense Web...

Страница 50: ...e appliance s C network interface 10 Click Save 11 Click Log Off at the top right when you are ready to log off Appliance Manager Install off appliance or optional components After the appliance has b...

Страница 51: ...ust be stopped before you reset to factory image 1 Stop all Websense components that are running off the appliance For example stop Web Security or Email Security Log Servers Sync Service Linking Serv...

Страница 52: ...he on screen instructions at the terminal and provide the necessary information See Perform initial command line configuration for details about what information is requested 10 Restore the backed up...

Отзывы: