Solved

Websense question

Posted on 2008-06-20
8
351 Views
Last Modified: 2012-05-05
I have close to no experience with Websense, and I dont really plan on learning anything about it since this is not administrated by my department. Still, without a slight bit off knowledge about the subject, I am in an "argument" about the use of the solution in my organization. :)

What I want to know is; Is it possible to set up a block in Websense that blocks EVERYTHING that ends with, say *.tv , and set up a whitelist for legit sites that gets through? There is allready a custom filter in place, which is why I can't belive this "option" is impossible to set up.

If it is possible, could you provide me with a short explanation or link to a howto on the subject.


0
Comment
Question by:oyvindha
  • 4
  • 3
8 Comments
 
LVL 7

Expert Comment

by:naughton
ID: 21835531
I beleive you'd use a protocol filter for streaming media - and then re-catoragise any sites with explicit permit.
0
 
LVL 2

Author Comment

by:oyvindha
ID: 21835546
I'm afraid you misunderstood me.. *.tv was just an example.. I wan't to close down all but certain sites in a specific country.
0
 
LVL 2

Author Comment

by:oyvindha
ID: 21835561
To be a bit more specific;

I would like to block all *.ru sites besides a whitelist that is approved
0
 
LVL 7

Expert Comment

by:naughton
ID: 21839127
I would create a keyword - .ru
i would then create a user defined category - called Keyword.  apply the keyword filter to this.
then block the category for the relevant policy, then apply the policy to the user / group / network segment required.
0
How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

 
LVL 2

Author Comment

by:oyvindha
ID: 21844785
Thanks for the suggestion Naughton. So the keyword filter will work on the URL's only or does it also affect content of the website? And adding sites to a white-list to get around this block would work?
0
 
LVL 14

Accepted Solution

by:
Ehab Salem earned 125 total points
ID: 21854937
I would make the following:
1- create a user defined category and name it say blocked root domain and set it to blocked by default
2- Goto custom URLs/recategorized, click on the created category and click add
3- In Enter URLs to permit enter just ".ru" (without the quotes)
Now all .ru is blocked
4- In Recategorized click on the category of the site you want to allow (say news), and add the site(s) you want to permit (provided News is allowed)
Now all .ru sites are blocked except the recategorized sites.
You can also add to Not filtered, but i prefer to recat as to appear in the reports.
0
 
LVL 2

Author Comment

by:oyvindha
ID: 21855063
Thanks ehabsalem.

I assume this is the way to go as it's pretty similar to the solution to Naughton's. So if I understand this right; settng the category to blocked by default, and adding a permitted URL to it in step 3, you are actually not permitting it but blocking?

Assuming there are no other solutions or tips other then this method, I'll close the question by the end of the day.
0
 
LVL 7

Assisted Solution

by:naughton
naughton earned 125 total points
ID: 21861255
correct - you can set each user / group / computer / network as either blocked or not.  and then recategorise any sites you explicitly want to allow into a different / permitted group to allow access if there is a need.

0

Featured Post

How to improve team productivity

Quip adds documents, spreadsheets, and tasklists to your Slack experience
- Elevate ideas to Quip docs
- Share Quip docs in Slack
- Get notified of changes to your docs
- Available on iOS/Android/Desktop/Web
- Online/Offline

Join & Write a Comment

This story has been written with permission from the scammed victim, a valued client of mine – identity protected by request.
Many companies are looking to get out of the datacenter business and to services like Microsoft Azure to provide Infrastructure as a Service (IaaS) solutions for legacy client server workloads, rather than continuing to make capital investments in h…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now