Solved

Websense question

Posted on 2008-06-20
8
356 Views
Last Modified: 2012-05-05
I have close to no experience with Websense, and I dont really plan on learning anything about it since this is not administrated by my department. Still, without a slight bit off knowledge about the subject, I am in an "argument" about the use of the solution in my organization. :)

What I want to know is; Is it possible to set up a block in Websense that blocks EVERYTHING that ends with, say *.tv , and set up a whitelist for legit sites that gets through? There is allready a custom filter in place, which is why I can't belive this "option" is impossible to set up.

If it is possible, could you provide me with a short explanation or link to a howto on the subject.


0
Comment
Question by:oyvindha
  • 4
  • 3
8 Comments
 
LVL 7

Expert Comment

by:naughton
ID: 21835531
I beleive you'd use a protocol filter for streaming media - and then re-catoragise any sites with explicit permit.
0
 
LVL 2

Author Comment

by:oyvindha
ID: 21835546
I'm afraid you misunderstood me.. *.tv was just an example.. I wan't to close down all but certain sites in a specific country.
0
 
LVL 2

Author Comment

by:oyvindha
ID: 21835561
To be a bit more specific;

I would like to block all *.ru sites besides a whitelist that is approved
0
 
LVL 7

Expert Comment

by:naughton
ID: 21839127
I would create a keyword - .ru
i would then create a user defined category - called Keyword.  apply the keyword filter to this.
then block the category for the relevant policy, then apply the policy to the user / group / network segment required.
0
Save on storage to protect fatherhood memories

You're the dad who has everything. This Father's Day, make sure your family memories are protected. My Passport Ultra has automatic backup and password protection to keep your cherished photos and videos safe. With up to 3TB, you have plenty of room to hold the adventures ahead.

 
LVL 2

Author Comment

by:oyvindha
ID: 21844785
Thanks for the suggestion Naughton. So the keyword filter will work on the URL's only or does it also affect content of the website? And adding sites to a white-list to get around this block would work?
0
 
LVL 14

Accepted Solution

by:
Ehab Salem earned 125 total points
ID: 21854937
I would make the following:
1- create a user defined category and name it say blocked root domain and set it to blocked by default
2- Goto custom URLs/recategorized, click on the created category and click add
3- In Enter URLs to permit enter just ".ru" (without the quotes)
Now all .ru is blocked
4- In Recategorized click on the category of the site you want to allow (say news), and add the site(s) you want to permit (provided News is allowed)
Now all .ru sites are blocked except the recategorized sites.
You can also add to Not filtered, but i prefer to recat as to appear in the reports.
0
 
LVL 2

Author Comment

by:oyvindha
ID: 21855063
Thanks ehabsalem.

I assume this is the way to go as it's pretty similar to the solution to Naughton's. So if I understand this right; settng the category to blocked by default, and adding a permitted URL to it in step 3, you are actually not permitting it but blocking?

Assuming there are no other solutions or tips other then this method, I'll close the question by the end of the day.
0
 
LVL 7

Assisted Solution

by:naughton
naughton earned 125 total points
ID: 21861255
correct - you can set each user / group / computer / network as either blocked or not.  and then recategorise any sites you explicitly want to allow into a different / permitted group to allow access if there is a need.

0

Featured Post

Scale it in WD Gold

With up to ten times the workload capacity of desktop drives, WD Gold hard drives employ advanced technology to deliver among the best in reliability, capacity, power efficiency and performance.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Article by: btan
Provide an easy one stop to quickly get the relevant information on common asked question on Ransomware in Expert Exchange.
You may have a outside contractor who comes in once a week or seasonal to do some work in your office but you only want to give him access to the programs and files he needs and keep privet all other documents and programs, can you do this on a loca…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

914 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now