Websense Community

How to exclude users from logging?

Rprohl — Thu, 12 Mar 2009 19:44:14 GMT

Is there a way to exclude a user or group of users from being logged, or is it an all or nothing affair? For example if you had a group of executives that were exempted from a logging policy.

Robert

Security Override for individual URL

Glitch — Fri, 10 Feb 2012 14:39:41 GMT

v7.6 included the new "Security Override" feature which, by default, blocks any attempts to recategorize a website that's blocked and in the Security Risk risk class. I think this is an awesome feature, however right now it's simply too inflexible. There are certain cases where someone would need to allow such a recategorization and right now the only ways to do it are much more dangerous.

If I need to allow a site that was improperly categorized as Spam, for example, I have 2 choices: 1) Remove the category it's in from the Security Risk class, or 2) Disable the Security Override feature entirely. These are harsh and dangerous options. We really need the ability to exclude a website(s) from the Security Override feature WITHOUT compromising / deactivating the security that feature provides otherwise. This could be a separate list for all I care, but somewhere an administrator should be able to decide to exclude a site from being blocked by Security Override without having to disable chunks of it.

Trying to get Disk space back. File deletion question

BNS1968 — Tue, 18 Jun 2013 14:47:32 GMT

I have shrunk the database and cleared windows temp and temp folders. This is on an older Websense installation, version 6.3.3 to be precise. I am looking in the BIN folder and see a file

C:\Program Files\Websense\bin\RTA86370

This file is 2GB in size and shows that it was last modified on April 20th 2013.

Is it safe to delete this file?

Identifying non domain users without Endpoint Client

mythumbsclick — Mon, 17 Jun 2013 12:14:22 GMT

Hi All

I am having some problems figuring out a way of identifying non domain users in Websense Cloud Security. Here is my scenario:

Domain Users

1. For all domain users, IE is configured with Websense hosted PAC file via Group Policy

2. WAN IP address has been added to proxied connections

3. I sync AD users and groups using the sync tool

4. Users are authenticated/identified using NTLM Transparent identification – which works perfectly

5. Domain laptop users additionally have the endpoint client installed for when they are offsite.

6. I don’t want to change the above configuration as this all works nicely.

Non domain user “associates”

Note: These users have their own laptops but still work for my company as associates. I cannot install endpoint clients on them or join them to the domain

1. Their laptops are not joined to the domain

2. They have local accounts not managed by us

3. They are connected to a separate subnet on our LAN

4. I have made a rule on my firewall to forward all internet requests to Websense for this subnet only. This works and these users get filtered without any setup required on their machines.

5. They have the same WAN IP so no changes needed for proxied connections etc.

6. They just hit the default Web categories as they are not identified within Websense

7. I want to be able to identify them within Websense so they can be included in any category exception rules that maybe relevant to them.

My thoughts on possible work arounds:

a) If a non domain user has the local windows username joe.bloggs and the computer name dellcomputer I thought I would be able to create a user in Websense portal joe.bloggs with the domain dellcomputer. This user would have appropriate email set and I would set them a password etc. They would then be able to use transparent NTLM like my domain users as effectively dellcomputer\joebloggs has been setup for the NTLM ID on the user account.

To test I added Joe.Bloggs@.... To exceptions for a few web categories but Joe Bloggs did not get access to the sites/categories

b) Amend my access denied page so that the when a block URL such as 888.com (gambling) is blocked, the usual block message is displayed followed by a section underneath that states something along the line of “If you are a non-domain Associate, please login with your email address and password”. They could then enter email address and pass and hit submit and be identified with Websense and relevant web categories allowed/denied as appropriate.

I put the following code into my Access Denied block form. The login boxes and button appear, but when I hit “submit” nothing happens. (I have testing by also adding a forgotten password button and this does work by sending an email to the users email address with a request to reset password)

<td align='center'>_NTLM_REGISTER_BUTTON_('Email address', 'Password', 'Submit')</td>

Are either of these 2 work arounds possible solutions to my problem or am I going about this the wrong way. Option b would be a satisfactory solution but can’t seem to find the correct HTML for this to work.

Support have said this isn’t supported so haven’t been a huge amount of help

Any help would be massively appreciated

thanks

Disposition 1057 - Blocked by Security Override

cfowler — Mon, 17 Jun 2013 13:28:53 GMT

Hey all;

Windows Server 2008 Enterprise R2, SP1, Websene Web Security 7.6.5 Standalone.

We have a default policy for our domain users & the "boxed" default policy for non-authenticated users. They have both been modified to be identical.

I have a situation where the non-authenticated user can visit a site and download an add-on but the domain user cannot. Testlogserver shows me that the disposition is 1057 (whatever that is - no def other than it's blocked via SIEM) and the action is Blocked by Security Override.

Why would the non-authenticated user have access but the authenticated user would not? What am I missing?

Thanks,

Carter

Cisco ASA issues

adias — Tue, 11 Jun 2013 18:41:07 GMT

Hello everyone!

Guys, I have a Cisco ASA integrated with Websense Web filter, I did all configuration and everything is works good, but sometimes a simple navegation has a high response time, and when I see ASA's report I saw it:

Date: URL Server x.x.x.x not responding

Do you guys have any idea?

Thank you!

HowTo delete Log Database partitions from the SQL Server Express?

ameuro — Sun, 16 Jun 2013 12:00:42 GMT

Hello.

How can I delete the Log database partitions on my MS Sql Express?

I have successfully delete them from Websense Manager, but they still are in Sql Express (in dbo.wse_partitions table and physically in the SQL database directory) .

Thank you.

Best regards.

Alessandro

allow Flash and Java Advertising on specific website

Alshuwaier — Wed, 12 Jun 2013 12:18:54 GMT

Hello,

I have request to allow Flash & Java Advertising for our organisation on news paper website .

how to do that ?

Feature Request for Screen Capture

roma@pcsuae.com — Fri, 14 Jun 2013 23:01:01 GMT

Screen Capture for only active screens. As in case we want to block screen capture we can't do so as there are lots of false positive becuase process of the application is running but user is not actually using that screen to do print screen and hence it gets blocked.

Request you to add in future version.

cannot unblock the site: 4njbets.com (4njbets.tvg.com)

Alex Zubarev — Thu, 30 May 2013 17:48:08 GMT

Hi,

I have 2 web sites 4njbets.com & 4njbets.tvg.com (so far) which I have placed in exception list and re-categorized (to the enabled category, originally it's Gambling now it's Business) but users still getting page cannot be displayed (not a websense message). From the websense GUI console I can see that these web sites are custom enabled and not blocked. If I will place a user account in to Monitor only mode (like Power Users) these web sites are working. I have Triton v.7.7 with Cisco ASA 5510 integration. Any ideas what should I check / change to allow these web sites through the policies?

Thanks.

customizing block pages on V10K

GR — Mon, 20 May 2013 08:55:32 GMT

it doesn't look like we can customize the following block pages currently (nor do they contain any info relating to Websense, making it confusing for both Users / Administrators):

###

Unknown Host

Description: Unable to locate the server named "doamin.com" --- the server does not have a DNS entry. Perhaps there is a misspelling in the server name, or the server no longer exists. Double-check the name and try again.

###

Connection refused

Description: Connection refused

###

Can we get an FR number for this please?

Thanks,

Phil

US Open Golf Tournament

RLloyd — Thu, 13 Jun 2013 12:19:49 GMT

With the US Open Golf Tournament starting today does anyone know if Websense is planning on moving URLs that provide live video to the Special Category? This was done for the NCAA March Madness, but I do not know if the PGA is considered for the category.

Thanks

Support for filtering users on Citrix XenApp 6.5

Peter Moore — Wed, 06 Mar 2013 12:11:26 GMT

We upgraded from Citrix Presentation Manager 4.5 to XenApp 6.5 in the fall and from what I can tell, 7.5, 7.6 nor 7.7 -- none of these Websense Web Security products support integration with XenApp 6.5 only 5 and 6.0 Websense has always supported Citrix integration (for user based policy), and 6.5 has been out for over a year... I'm really disappointed that Websense has not provided support for it, unless I just don't see where /how ? How are others handling this issue? I suppose I could continue filtering with a general policy, but when human resources asks me for a report to show web browsing activity for an individual citrix user, I will be left explaining that I cannot provide it .... Is there an ETA for XenApp 6.5 integration support ? This is really important and may result in my searchign for another product/solution all together.. which would be a shame.

Websense Standalone and Citrix

mhargeby — Tue, 12 Feb 2013 12:25:55 GMT

Hello!

I have a websense standalone machine with all the necessary roles installed ( network agent etc ). This works fine and the product blocks and logs good. I would like to integrate this solution with a citrix server and found several documents about configurering this. Even though i have followed the documents i don´t really know what to do, because i see different setups for this.

To my understanding the only thing i need is to install the NA on another server and then the ´citrix plugin on the citrix servers. And then exclude IP´s etc. But this does not work so i am missing something. Can anyone point me in the right direction.

Martin

Malicious Web Sites

maxvol12000 — Wed, 12 Jun 2013 09:44:02 GMT

Dear Websense,

When Websense blocks a site due to the site being a Malicious Website, it would be useful if there was a way of getting more information as to why Websense thinks the site is a risk. I still get people insisting that they need access to these sites, so I have to do an investigation (access it from a test machine), which does not need to happen if I knew why the site was blocked in the first place.

Invalid Blocked Websense Message

SD — Mon, 10 Jun 2013 16:25:11 GMT

Hello,

We have a user who's trying to access a specific URL that once was accessible but now, the user isn't able to access the site. The strange part is that the URL isn't listed in recategorized "Block" category but Websense thinks that it is. We aren't blocking that URL. The version of Websense Web Security is 7.7.

Any help you can provide would be great.

Thanks.

Cloud web security registration mail not receiving

subhras00 — Thu, 04 Apr 2013 11:26:39 GMT

I and some of my colleagues registered in websense. Now we tried to get register with cloud web security. we used the pac file in browser setting and when we tried to open internet it asked for registration i.e to provide name and email. We have given that. 2 among us have received the mail from bounce@websense.com to continue with registration but others 5 did not. What could be the reasons?

How to Print Policies to File individually? NOT All Policies to file.

redes@appai.org.br — Wed, 03 Oct 2012 14:38:03 GMT

Can I to print policies to file (like a report) individually?
For example:
I want to print only my policy "Default" to show my boss what this policy is doing.
I saw that I can print ALL policies to excell. But it doesn't good. I need it like a report.
Is it possible?
thank you so much, and so sorry about my english. :p

Attempting to schedule a presentation report to run automatically, but it never seems to go through.

BNS1968 — Wed, 12 Jun 2013 13:01:47 GMT

I am trying to send a presentation report detailing the bandwidth usage per group. When I go to run the report manually I receive the e mail. I want to be able to send it to myself on a daily basis and I have gone through the steps to do so, but it does not come through, I would like to receive the report using relative dates for last month, and I want to schedule it daily for now, and schedule it to my manager monthly. I have tried but it does not go through. When it is done manually, no problem, but when I attempted a daily schedule, it never went anywhere and I did not receive ANY failure notices.

The WS server is a Windows 2003 Server 32 Bit and the WS version is Websense Web Filter 7.5

Many thanks

Remove option to Whitelist a whole Domain

michael.grams — Tue, 11 Jun 2013 20:11:35 GMT

I received a request from a user today to help her get an email address added to her whitelist. I was pretty surprised when I saw the option to "Whitelist sender domain gmail.com". I was even more surprised when I wasn't able to see the option to delimit whitelisting domains. I am coming from Postini where we used to be able to delimit that option because what user really wants all of gmail.com or another domain to be completely whitelisted? I think it'd be a great addition to control who users can/can't set to their Whitelist.

Can't sort emails in message administrator anymore WES v7.3 HF7

SIAST — Mon, 10 Jun 2013 18:15:22 GMT

Up until a few months ago, we were able to sort message searches by sender, subject, date, status, etc... but we can't anymore. Was this due to a patch/hotfix install? Does anyone know how to fix this?

Add reporting features to Personal Email Manager

MrT — Tue, 11 Jun 2013 15:01:07 GMT

Our customer would like to be able to report on certain features of Personal Email Manager (PEM). For example, how many users are using the system, how many emails have been blocked, how many emails have been releaased etc...

These are just a few reports but I am sure there are a lot of others that would be equally as useful?

Thanks

AD User Directory - Possible to query on group members instead of OU?

Ray Pesek — Fri, 27 Jan 2012 03:42:26 GMT

We need to control PEM notifications and portal access using Active Directory but we don't want to build a new OU just for this purpose. Is it possible to set up a User Directory query based on AD group membership?

I've tried various incantations using "memberOf" but I can't get it to work.

Thanks for any assistance you can lend,

Ray

Does Websense v7.7 Support SQL Server 2008 SP3

Tedwards — Mon, 10 Jun 2013 18:23:09 GMT

We are currently running SQL Server 2008 SP2 (not R2). We would like to upgrade to SQL Server 2008 SP3. According to the release notes for Websense v7.7 and v7.7.3 it supports:

Microsoft SQL Server 2008 or 2008 R2 Standard or Enterprise

Microsoft SQL Server 2005 SP3 Standard or Enterprise

Microsoft SQL Server 2008 R2 Express

but this doesn't tell me about services packs? Any one running v7.7 on SQL 2008 SP3?

Trying to unblock only google docs viewer

Matt Rushmore — Mon, 03 Jun 2013 17:02:48 GMT