Solved

Websense question

Posted on 2008-06-20
8
373 Views
Last Modified: 2012-05-05
I have close to no experience with Websense, and I dont really plan on learning anything about it since this is not administrated by my department. Still, without a slight bit off knowledge about the subject, I am in an "argument" about the use of the solution in my organization. :)

What I want to know is; Is it possible to set up a block in Websense that blocks EVERYTHING that ends with, say *.tv , and set up a whitelist for legit sites that gets through? There is allready a custom filter in place, which is why I can't belive this "option" is impossible to set up.

If it is possible, could you provide me with a short explanation or link to a howto on the subject.


0
Comment
Question by:oyvindha
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
8 Comments
 
LVL 7

Expert Comment

by:naughton
ID: 21835531
I beleive you'd use a protocol filter for streaming media - and then re-catoragise any sites with explicit permit.
0
 
LVL 2

Author Comment

by:oyvindha
ID: 21835546
I'm afraid you misunderstood me.. *.tv was just an example.. I wan't to close down all but certain sites in a specific country.
0
 
LVL 2

Author Comment

by:oyvindha
ID: 21835561
To be a bit more specific;

I would like to block all *.ru sites besides a whitelist that is approved
0
Create Professional Looking Email Signatures

Create "Professional HTML Email Signatures" with ease.
7 Day Money Back Guarantee if not 100% Satisfied.
Affordable - Try it out for 7 Days Totally Risk Free.
Installers provided for over 45 Email clients.
Both Windows & MAC Supported.
Highly Recommended!

 
LVL 7

Expert Comment

by:naughton
ID: 21839127
I would create a keyword - .ru
i would then create a user defined category - called Keyword.  apply the keyword filter to this.
then block the category for the relevant policy, then apply the policy to the user / group / network segment required.
0
 
LVL 2

Author Comment

by:oyvindha
ID: 21844785
Thanks for the suggestion Naughton. So the keyword filter will work on the URL's only or does it also affect content of the website? And adding sites to a white-list to get around this block would work?
0
 
LVL 14

Accepted Solution

by:
Ehab Salem earned 125 total points
ID: 21854937
I would make the following:
1- create a user defined category and name it say blocked root domain and set it to blocked by default
2- Goto custom URLs/recategorized, click on the created category and click add
3- In Enter URLs to permit enter just ".ru" (without the quotes)
Now all .ru is blocked
4- In Recategorized click on the category of the site you want to allow (say news), and add the site(s) you want to permit (provided News is allowed)
Now all .ru sites are blocked except the recategorized sites.
You can also add to Not filtered, but i prefer to recat as to appear in the reports.
0
 
LVL 2

Author Comment

by:oyvindha
ID: 21855063
Thanks ehabsalem.

I assume this is the way to go as it's pretty similar to the solution to Naughton's. So if I understand this right; settng the category to blocked by default, and adding a permitted URL to it in step 3, you are actually not permitting it but blocking?

Assuming there are no other solutions or tips other then this method, I'll close the question by the end of the day.
0
 
LVL 7

Assisted Solution

by:naughton
naughton earned 125 total points
ID: 21861255
correct - you can set each user / group / computer / network as either blocked or not.  and then recategorise any sites you explicitly want to allow into a different / permitted group to allow access if there is a need.

0

Featured Post

On Demand Webinar - Networking for the Cloud Era

This webinar discusses:
-Common barriers companies experience when moving to the cloud
-How SD-WAN changes the way we look at networks
-Best practices customers should employ moving forward with cloud migration
-What happens behind the scenes of SteelConnect’s one-click button

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

No single Antivirus application (despite claims by manufacturers) will catch or protect you from all Virus / Malware or Spyware threats. That doesn't stop you from further protecting yourself however - and this article is to show you how.
Keystroke loggers have been around for a very long time. While the threat is old, some of the remedies are new!
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

737 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question