Configuring Websense Enterprise Content Filtering

Websense Enterprise is a third-party Internet filtering package that allows you to use Internet content filtering through the SonicWALL.

1	Navigate to the Security Services > Content Filtering page.

2	Select Websense Enterprise from the Content Filter Type drop-down menu. The CFS Policy Assignment drop-down menu no longer displays.

3	Click Configure to display the Websense Properties window.

 

NOTE: You specify enforcement of content filtering on the Network > Zones page.

4	Configure the following options in the Settings section:

•	Server Host Name or IP Address - Enter the host name or IP address of the Websense Enterprise server used for the Content Filter List.

•	Server Port - Enter the UDP port number for the SonicWALL to listen for the Websense Enterprise traffic. The default port number is 15868.

•	User Name - To enable reporting:

•	Of users and groups defined on the Websense Enterprise server, leave this field blank.

•	By a specific user or group behind the SonicWALL, enter the user name configured on the Websense Enterprise server for the user or group. If using:

•	NT-based directories on the Websense Enterprise server, the user name is in this format: NTLM:\\domainname\username.

•	LDAP-based directories on the Websense Enterprise server, the user name is in this format: LDAP://o-domain/ou=sales/username.

IMPORTANT: If you are not sure about the entering a user name in this section, leave the field blank and consult your Websense documentation for more information.

•	Enable HTTPS Content Filtering – Select if using HTTPS content filtering. The default is not selected (disabled).

•	Enable Websense probe monitoring – Select if using Websense probe monitoring. The default is not selected (disabled).

•	Check Server every – Enter the interval, in seconds, for the firewall to probe the Websense Server. The default value is 10 seconds.

•	Deactivate Websense after missed probes – Enter the maximum number of probes that can be missed before Websense Enterprise server filtering is deactivated. The default number is 3 missed probes.

•	Reactive Websense after successful probes – Enter the minimum number of sequential probes that are successful to reactive Websense Enterprise server filtering after it has been deactivated. The default number is 2 successful probes.

•	If Server is unavailable for (secs) or deactivated (due to missed probes) - Defines what action is taken if the Websense Enterprise server is unavailable. The default value for timeout of the server is 5 seconds, the minimum is 1 second, and the maximum is 10 seconds.

•	Block traffic to all Web sites - Selecting this option blocks traffic to all Web sites except Allowed URLs until the Websense Enterprise server is available. This is the default.

•	Allow traffic to all Web sites - Selecting this option allows traffic to all Web sites without Websense Enterprise server filtering. However, Forbidden URLs and Keywords, if enabled, are still blocked.

5	Configure the following option in the URL Cache section:

•	Cache Size (KB) - Configure the size of the URL cache in KB. The default is 50 KB.

TIP: A larger URL cache can result in noticeable improvements in Internet browsing response times.

6

Click OK.