Choose from several options for complete web, email and data security.
Learn more
Evaluate Websense products by watching demos and installing evaluation software.
Learn how Websense solutions help keep our customer safe, secure and productive
Get information on product updates, support resources and more.
Get the most out of support in five simple steps.
Find tools and assets to help sell Websense solutions.
Come work for the global leader in unified information security. Go
We have Websense v7.5 in standalone mode. A few minutes testing it did not block expected traffic.
The Example Standard Policy is put into effect for the entire office's network.
Any reason why testlogserver shows all outbound requests as https?
--------------------------------------------------------------------------------------------------------------time=Wed Jul 25 09:03:59 2012 version=3server=10.10.1.82 source=10.10.1.20 dest=216.203.33.181protocol= "HTTPS"url= "HTTPS://216.203.33.181:443"port= "443"category= 9 (INFORMATION TECHNOLOGY)disposition= 1026 (Category Not Blocked)app type= ""keyword= ""user= "LDAP://avny01 OU=IT Dept,OU=500 7th Ave - Administrative,DC=AdjmiApparel,DC=local/BBAdmin"bytes sent=2706 bytes received=6551 duration=0 ...time=Wed Jul 25 09:03:53 2012 version=3server=10.10.1.82 source=10.10.1.106 dest=198.22.77.107protocol= "HTTPS"url= "HTTPS://198.22.77.107:443"port= "443"category= 153 (UNCATEGORIZED)disposition= 1026 (Category Not Blocked)app type= ""keyword= ""user= ""bytes sent=5095 bytes received=55084 duration=15---------------------------------------------------------------------------------------------------------------------
That's valid looking HTTPS, but are you sure you're actually filtering HTTP traffic? The chances of true HTTP traffic coming up as HTTPS on port 443 is pretty much nill.
Check Network Agent settings in Triton and make sure you don't have it set to exclude port 80 and such due to integration (since you have no integration). That may be your problem.
If not that, run "testlogserver -onlyip <YOUR IP>" and do some more specific testing.
You are right in your reasoning. However, there's an underlying issue here.
I found that Websense is still in Integrated mode even though I went through uninstall/install process w/ filtering/agent twice already.
Working w/ support to manually change this over.
