Choose from several options for complete web, email and data security.
Learn more
Evaluate Websense products by watching demos and installing evaluation software.
Learn how Websense solutions help keep our customer safe, secure and productive
Get information on product updates, support resources and more.
Get the most out of support in five simple steps.
Find tools and assets to help sell Websense solutions.
Stay informed on the latest security exploits, industry news, research, solutions, and more.
Hi,
I often restart 3 services when a user on AD gets updated for internet access. I also have quota settings for a few websites. I notice that if I restart websense filtering service, which is required for AD updates, the quota becomes inaccurate. In my case, if a user has time left in the quota for the day, the quota will report that user has used up the time for the day after websense filtering service restart. Can this be fixed?
Thanks
Which Websense version you are using? To help you, I need to run a test on the same version.
Thanks,
Websense Forum ModeratorWeb Security | Data Security | Email Security
Version 7.1
20090506_1154
While you are testing this you might want to have a look at another issue relating to quota time as well.
I have 60 mins quota time set on facebook.com. If I open up IE (1 tab only) and go to facebook.com and leave the session idle for 5 mins then open up another tab (2nd tab) and go to google.com, close down the 1st tab (facebook.com) and leave the 2nd tab (google.com) open. The quota time becomes inaccurate or doesn't work the way it should?
After I've closed the facebook tab and left the google tab open for 30 mins, I then go back to IE and open up a 2nd tab for facebook.com the quota time says that I've got 30 mins left on my quota time eventhough facebook was used for 5 mins only. This is a known issue or this quota time function has never worked properly in the first place?
Based on your description, I suspect you set quota session length to 10 minutes. Your symptom is correct. Websense cuts quota time by session length instead of actual browse time. For example, if you set quota time 60 minutes per day, and session length is 10 minutes, you only have 6 sessions for visiting quota blocked sites. When you click the use quota button, one session (10 minutes) will be cut from the total quota time, even though you may only browse 3 minutes.
For more detailed information, please refer to the KB article below:
http://www.websense.com/support/article/kbarticle/What-is-quota-time-and-how-does-it-work
I have run a test, and proved that the quota will not be affected after restarting filtering service.
You are wrong on this one. I've just tested this again and the quota gets used up after websense filtering service is restarted. If a 15 mins session is live and 2 mins of time is being used within that session, a restart of websense filtering service will end this session (time will be used up eventhough there's 13 mins left in the session!!!!!)
I have a Casio timer and 3 watches doing the timing and I'm pretty sure that 2 mins get used in a 15 mins session after a service restart.
Sorry, I mis-understood your explanation. I just thought the entire qouta time will be used up after restarting FS. Yes, you are correct on this, and it is by-design. But I do not know why you want to restart FS?
As I explained earlier the reason why I have to manually restart FS - FS is one of the services I have to restart. I do this because websense wouldn't synchronise fast enough with AD everytime I make changes to groups. I was told to restart 3 services to get an instant change by websense tech support. Is there a work around to this at all?
You can do the following to shorten the synchronization time:
Two parameters can be added in the eimserver.ini and websense.ini files: In eimserver.ini[WebsenseServer]PolicyCacheTimeout=15 Note: You may already have [WebsenseServer] so just add the PolicyCacheTimeout=15 Stop the services 'EIM', then 'User', then 'Policy'; then Start the services 'Policy', then 'User', then 'EIM'. What this entry will do is cache your EIM Server (Filter Service) queries with a TTL (Time To Live) set at 15 minutes from the Default of 3 hours. This will increase the queries to the Domain Controllers. In websense.ini[DirectoryService]CacheTimeout=15 Exert maximum caution when implementing these values, as they increase overall network traffic.
Kr, :)
Thanks for this. I'll test this out tomorrow. One more thing if it's okay. On my server, websense logon agent sometimes stops by itself. Any ideas?
For Logon Agent, please first apply a HF below:http://eval.websense.com/download/patches/WWF_7.1_Hotifx_13_LogonApp_KB960803.zip
Please make sure there is no anti-virus software running on your Websense server.
Thanks.
Are you saying websense server should not be any type of anti virus software on it?
Yes. We do not recommend customer install anti-virus software on Websense server.
Hola,
Existe un problema con las cuotas, al entrar un cliente tiene 60 minutos, al momento de entrar esta alrededor de 8 minutos, en la siguiente vez que entra marca que le quedan 40 minutos, este problema a que se debe?
Gracias y saludos!
