Search

Websense & ESX server - Help needed

rated by 0 users
Answered (Not Verified) This post has 0 verified answers | 3 Replies | 2 Followers

Not Ranked
2 Posts
DanielG Confused [*-)] posted on 29 Jun 2009 2:25 AM

Hello Websense gurus,



Machine on which Websense is running is already a Virtual Machine, but my client asked me if we can help them fix reporting and logging.



Some things about the VM configuration:

----------------------------------
Websense machine has 2 NIC cards:

NIC 1: configured for Monitoring
NIC 2: Configured for blocking
----------------------------------


Following this tutorial:

http://www.darylhunter.me/churchit/2008/11/websense-loggin.html


a new physical NIC was added to the ESX server. New Virtual switch was created and this physical NIC added to the switch.

i added a new NIC card to Websense machine which was mapped directly to this switch.
Promiscous mode enabled on VM and on Switch.

If i understood correctly, this new physical connection is needed so that the Physical port can be mirrored.



After this configuration the Websense machine will be:


NIC 1: configured for Monitoring
NIC 2: Configured for blocking
NIC 3: no configuration - yet ( this NIC is assigned to a phisycal NIC).



Now the questions:


After adding this 3rd NIC websense is crashing and i am not sure about the configuration.


Which will be the correct configuration so that reporting and logging will work?



thank you for your help!

|
Reply Suggest an Answer

All Replies

Top 25 Contributor
211 Posts
Reply
Answered (Not Verified) Moderator Veronica replied on 29 Jun 2009 4:47 AM
Suggested by Moderator Veronica

Hi there,

 

Please just remove your NIC-3 to have Websense back to work.

It seems that your VM network has been configured incorrectly.

As it is very complicated to describe the network via words, I would recommend to raise a case with Websense Technical Support and let someone remote into your server to verify your configurations.

 

Thanks!

|
Not Ranked
2 Posts
Reply
DanielG replied on 29 Jun 2009 5:31 AM

thanks for reply,

 

i already removed it from Virtual machine.

 

How to configure properly Websense with this new NIC in order for logging and reporting to function?

If i understood correctly we need to monitor this new NIC ( some port mirroring will be involved).

thanks for support!

 

|
Top 150 Contributor
20 Posts
Reply
Stagiaire replied on 9 Aug 2012 4:04 AM

Hello DanielG,

After long time,

I want to the same job as you, to test websense for monitoring, i've installed the protector, and the Triton under VMs in the ESXi server,

Protector is deployed successfully, but i'have no data incidents too,

Can you describe to me, the architecture that i must use   (how many vswitchs, ports, ...)  !?

 

Thank you. 

|
Page 1 of 1 (4 items)