Choose from several options for complete web, email and data security.
Learn more
Evaluate Websense products by watching demos and installing evaluation software.
Learn how Websense solutions help keep our customer safe, secure and productive
Get information on product updates, support resources and more.
Get the most out of support in five simple steps.
Find tools and assets to help sell Websense solutions.
Come work for the global leader in unified information security. Go
Do you know if Websense will log any connection attempts that are not successful?
In running an invesitgative report, will Websense log any unsuccessful connection attempts from a source IP to a desitination?
That would depend on a few things. The version of Websense you are using would be useful. The integration and your definition of "not successful" would be imperative.
I am using 7.5 and I guess to clarify I would like to know if running an investigation report, when I look at the report of source IP to Desitnation. Is that only successful connections to the Destination or does that show everything?
That shows everything unless you have filtered by action in the report.
Everything except if you require authentication to the proxy and the authentication fails. In that case, the Investigative Reports and also the Real Time Monitor show absolutely nothing. The only why I know of to figure this out is to run tcpdump on the proxy and look for the source IP specifically.
This is the case for NTLM. I don't know if it works the same way for IWA.
Ray
Another example: If it's an HTTPS connection and the user (or browser) rejects the SSL handshake that will not be logged.
