WS75 Install StandAlone

  • View
    11

  • Download
    0

Embed Size (px)

DESCRIPTION

web sense

Text of WS75 Install StandAlone

  • 5/27/2018 WS75 Install StandAlone

    1/124

    I n s t al l a t i o n Gu id e

    v7.5

    WebsenseWeb Secur i ty

    Websense Web Fi l ter

  • 5/27/2018 WS75 Install StandAlone

    2/124

    19962010, Websense, Inc.10240 Sorrento Valley Rd., San Diego, CA 92121, USAAll rights reserved.

    Published 2010Printed in the United States of America and Ireland

    The products and/or methods of use described in this document are covered by U.S. Patent Numbers 5,983,270; 6,606,659; 6,947,985; 7,185,015;7,194,464 and RE40,187 and other patents pending.

    This document may not, in whole or in part, be copied, photocopied, reproduced, translated, or reduced to any electronic medium or machine-readable form without prior consent in writing from Websense, Inc.

    Every effort has been made to ensure the accuracy of this manual. However, Websense, Inc., makes no warranties with respect to thisdocumentation and disclaims any implied warranties of merchantability and fitness for a particular purpose. Websense, Inc., shall not be liable forany error or for incidental or consequential damages in connection with the furnishing, performance, or use of this manual or the examples herein.The information in this documentation is subject to change without notice.

    Trademarks

    Websense is a registered trademark of Websense, Inc., in the United States and certain international markets. Websense has numerous otherunregistered trademarks in the United States and internationally. All other trademarks are the property of their respective owners.

    Microsoft, Windows, Windows NT, Windows Server, Windows Vista and Active Directory are either registered trademarks or trademarks ofMicrosoft Corporation in the United States and/or other countries.

    Sun, Sun Java System, and all Sun Java System based trademarks and logos are trademarks or registered trademarks of Sun Microsystems, Inc., inthe United States and other countries.

    Red Hat is a registered trademark of Red Hat, Inc., in the United States and other countries. Linux is a trademark of Linus Torvalds in the UnitedStates and other countries.

    Novell, Novell Directory Services, eDirectory, and ZENworks are trademarks or registered trademarks of Novell, Inc., in the United States and

    other countries.UNIX is a registered trademark of The Open Group in the United States and other countries.

    Pentium, Xeon, and Core2 are registered trademarks of Intel Corporation.

    This product includes software developed by the Apache Software Foundation (www.apache.org).Copyright (c) 2000 The Apache Software Foundation. All rights reserved.

    Other product names mentioned in this manual may be trademarks or registered trademarks of their respective companies and are the sole propertyof their respective manufacturers.

    WinPcap

    Copyright (c) 1999 - 2005 NetGroup, Politecnico di Torino (Italy).Copyright (c) 2005 - 2009 CACE Technologies, Davis (California).All rights reserved.

    Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:

    Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation

    and/or other materials provided with the distribution.

    Neither the name of the Politecnico di Torino, CACE Technologies nor the names of its contributors may be used to endorse or promote productsderived from this software without specific prior written permission.

    THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIEDWARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR APARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FORANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOTLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESSINTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, ORTORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IFADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

    http://www.apache.org/http://www.apache.org/
  • 5/27/2018 WS75 Install StandAlone

    3/124

    Installation Guide 3

    Contents

    Chapter Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5Using this guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5

    Other related documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6

    Websense components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

    How Websense filtering works . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

    Steps for a successful Websense software deployment . . . . . . . . . . . . . . . . . . . . 10

    Technical Support. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

    Chapter 2 Installation Procedures . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13Websense installers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

    Installation flow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

    Before installing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

    Planning and gathering required information . . . . . . . . . . . . . . . . . . . . . . . . . 15

    Synchronizing clocks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

    Installing on Linux . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

    Computer Browser service (Windows Server 2008). . . . . . . . . . . . . . . . . . . .17

    Ports. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

    Remote filtering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17Websense Network Agent. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

    Network interface card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

    Internet access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

    Remote control utilities . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

    Preparing to install . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

    Typical installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

    Windows . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

    Linux . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

    Installation procedure: typical installation . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

    Installing individual components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

    Installation procedure: any component . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

    Modifying an installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77

    Adding components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77

    Removing components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78

    Stopping and starting Websense services. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85

    Manually stopping and starting services (Windows) . . . . . . . . . . . . . . . . . . . 85

    Manually stopping and starting services (Linux) . . . . . . . . . . . . . . . . . . . . . . 85

    Stopping principal components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87

  • 5/27/2018 WS75 Install StandAlone

    4/124

    4 Websense Web Security and Websense Web Filter

    Contents

    Chapter 3 Initial Setup. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89Configuring Websense Apache services for trusted connection . . . . . . . . . . . . . 90

    Starting TRITON - Web Security. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .91

    Configuring firewalls or routers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92

    Working with Windows Server 2008. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93Turning on the Computer Browser service . . . . . . . . . . . . . . . . . . . . . . . . . . . 94

    Identifying Filtering Service by IP address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95

    Creating and running the script for Logon Agent . . . . . . . . . . . . . . . . . . . . . . . .95

    Prerequisites for running the logon script . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96

    Websense user map and persistent mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97

    Deployment tasks . . . . . . . . . . . . . . . . . .