Solved

cannot get websense to use child domain user groups in filtering

Posted on 2008-10-07
2
1,400 Views
Last Modified: 2013-11-16
have websense installed and inegrated with checkpoint. primarily using the websense to filter traffic for the remote office that has an edge unit there. the central server as wel as filtering server is here in the main office, at the remote site I have a server that is running dc agent, and network service. problem is that I can only filter by IP address, whereas I am supposed to be able to filter by user groups.
I set up the central server to access ldap both at the primary site as well as the dc running the child domain in the remote office. finally got communication going as far as the ldap goes but now I get this

10/06/2008 19:02:19,Warning,WebsenseDCAgent,XidDcAgent,WsNTDomainsWinImpl.cpp:318,0x20010001,System error while enumerating the domain controllers. domain: RITANI-NY ecode: 6118 : message: The list of servers for this workgroup is not currently available

once again policy server is in a different location than the child domain. when I run net view /domain from the policy server I do not see the child domain in the list. Any help would be appreciated
0
Comment
Question by:GidonP
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 17

Assisted Solution

by:sgsm81
sgsm81 earned 150 total points
ID: 22666949
Hi

Have you considered running Websense 7 which i believe has more flexibility ?

We had a similiar problem with AD integration via LDAP which seemed to work sporadically which is now OK since the upgrade.

NB an in place upgrade will currently not work as Websense have admitted a problem with the process, it will require a delete and re-install of Websense

Might be worth checking with Websense Support as well
0
 

Accepted Solution

by:
GidonP earned 0 total points
ID: 22669905
resolved the issue by copying the DN straight from adsiedit, I guess I need to learn to type better. Also redid the root context and got it resolved. Mind you this was done while sitting on hold waiting for support. I am waiting for them to fix the in place upgrade issue before we upgrade.
0

Featured Post

Turn Insights into Action

Communication across every corner of your business is essential to increase the velocity of your application delivery and support pipeline. Automate, standardize, and contextualize your communication processes with xMatters.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A project that enables an administrator to perform actions within a user session context not just at the time of login but any time later on day(s) or week(s) later.
A company’s centralized system that manages user data, security, and distributed resources is often a focus of criminal attention. Active Directory (AD) is no exception. In truth, it’s even more likely to be targeted due to the number of companies …
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

691 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question