Websense triton admins

Thanks.... I want to look at whats been setup in terms of policies/configuration in websense, I just wondered where we'd start? Is there like a management console where all the settings/policies can be exported from?

Do you have any specific suggestions for a websense audit/healthcheck. i.e. a top 10 checks to look at the overall usage/configuration of websense

I dont suppose you could provide a screenshot on how to do the export and what format it will come out in ?? i.e. a sample output...

Two helpful pages are the "Today" and "Alert" pages in the Websense Manager. The today page will show you a quick overview of stats and web usage including categories blocked, security risks, etc. The Alerts page will show you if a component is down, offline, etc.

As far as backing up  there are two tools you can use. One is WsBackup which takes a snapshot of the setting and configuration of your Websense installation. The second is PgSetup which is a PostgreSQL tool that is used to backup the PostgreSQL database which contains all of your policies, etc.

WsBackup will also backup the policies but can only be restored to the same version of Websense. PgSetup is used more for upgrades and migrating policies.

http://www.websense.com/support/article/t-kbarticle/v7-How-do-I-back-up-my-Websense-filtering-configuration-1258048449474

Thanks

>>I dont suppose you could provide a screenshot on how to do the export and what format it will come out in ?? i.e. a sample output...

Unfortunately, I no longer work on Websense now but I will try to get some help for you. Which version are you using?

My pleasure. What version of Websense are you running? Any other specific questions I can help with?

Alan

currently 7.5, thank you

I would recommend upgrading to 7.6.2 which fixes a lot of issues with the 7.5 series and makes management easier with the updated TRITON Manager console. If you have any specific questions let me know.

Alan

I was just really after if you were doing an audit/healthcheck of websense, as a previous admin of websense,

a) how you can see whats been configured
b) Specific areas of concern that youd check thoroughly

The only sample audit program offering for websense I found focused on:

"application/protocol controls"
"authentication"
"admin delegation"
"policy assessment"

But provided no more detail than areas to check..

I was just after some further input into what testing could be done (and how to do so) in these areas and where in websense they can be checked...

Just as a general question, I am behind a websense installation and most sites are either blocked or fall into quota time. From within the console, I assume you can make some folk exempt from some of the blocked site policies so they can access them, can this be viewed in websense console easily enough?

Anyone still willing to help?

Yes, sure
You need to add the users/groups, create policies and then apply policies to the users/groups.
It's quite straight forward...

Thanks. Can these policies be exported into any sort of management freindly report, so we can see whats been setup? Or so a new websense admin knows whats been setup? And will it be easy on the eye as to what the policies represent in terms of who can access what?

He can look into the console, this will be the easiest way to get info. You can export the settings to Excel format as well, but depending on your setup, it might be too long.

I dont suppose you can show a sample export just so I can see how it looks, by all means redact names etc./

And a list of who can access the console would be very interesting, and who can read only, who can amend polcies etc.

This is how to export policies:
http://www.websense.com/support/article/kbarticle/Export-all-policies-and-custom-URLs

Attached is a sample export.

List of users who can access the console can ve viewed on the console directly.
websense.xlsx

Thank you!

So in your case theres groups:

* Global

Block All

Limited

Limited BW

Managers

Power Users

Special Users


And you add users to these groups?

Can this be seen in the console to, i.e. which users are in which groups

Yes, you can also use Active Directory groups if you have AD.

Where can you see who is in which group, if in console can you be specific as I need an admin to produce a list. Same for seeing who can access the console, where exactly can I see this? Thank you!!

Also - how can you see which groups can access what? For example that xlst file lists categories of websites, and then it has "basic filter" block/permit, so is that for all groups, or just some? If its block for all groups, how is there any need for different groups?

Cheers

Do you admin websense email as well? Or just the internet filter?

I only admin Websense Web filter.

Where can you see who is in which group, if in console can you be specific as I need an admin to produce a list. Same for seeing who can access the console, where exactly can I see this? Thank you!!

Also - how can you see which groups can access what? For example that xlst file lists categories of websites, and then it has "basic filter" block/permit, so is that for all groups, or just some? If its block for all groups, how is there any need for different groups?