Websense security bugs

Does anyone know if there have ever been any vulnerabilities assoicated with websense email security / web security? And what the potential impact of these vulnerabilities were? And are they (vulnerabilities with these products) found pretty regular or pretty rare - and is the compnay (websense) fairly good at releasing patches in a timely manner?
LVL 4
pma111Asked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Ehab SalemIT ManagerCommented:
We have been using Websense Websecurity for more than 6 years (since WS Ent 5) and being perfect is something practically impossible.
All software have bugs and security holes, and Websense is one of them.
We had some issues with version 5 and the early versions of 6 but were solved; sometimes in a timely manner, sometimes you have to make a workaround till being solved.
But it worth mentioning that v7 is much stable and has far less issues than previous versions (also v6.3 is excellent).
Websense support improved a lot in the past 2 years and the response time is much better, but we still face sometimes un-professional support.
To get the most out of it, you have to clearly understand your needs and to clearly understand how WS works.
I would say as a final word, WS is an expensive product, but in my opinion it is the best product in the market.
As for mail security, I did not use it.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
pma111Author Commented:
Thanks, so how many patches do they release per year? And any idea how you can verify if you are fully patched.

Aside, you mention you use websense. So do our company, I want to know what day to day management/support/admin of websense is required, so i can check our admins are managing/supporting the product properly? Would you be willing to give some examples?
Ehab SalemIT ManagerCommented:
Patches are something like 1-2 monthly, and you have to maintain you patching history, I am not aware of a method that tells you your 'patching' position.
If you make your setup properly and configure automated reports, you will rarely need intervention.
Once this is done, you will have to check the reports regurarly and tweak your settings, add custom URL categorization. This would last for couple of months or more (depending on you number of users).
After that, administration won't consume more than 4-6 hours monthly.
pma111Author Commented:
Thanks, how do you admin websense, is it via a web app on a remote server? Are there any best practices on config and changing default passwords etc?

>>If you make your setup properly

^ Any best practice docsguides in this area? ^
Ehab SalemIT ManagerCommented:
how do you admin websense: via http console, however very minor configurations are done on the server like the reporting DB connection and the network agent. These are only in the setup phase.

Any best practice docsguides in this area?
Websense documentation is fairly good, and if you have good IT background you will be able to complete the setup alone, but I recommend getting help from a WS authorized technician to make the initial configuration.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Security

From novice to tech pro — start learning today.