Websense triton admins

pma111
pma111 used Ask the Experts™
on
Are there any websense triton admins on here? I will keep open if no response will delete the question, if there are I have a few basic questions on how to determine whats been setup...
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Sr. Security Engineer
Commented:
What can I do for you :)

Author

Commented:
Thanks.... I want to look at whats been setup in terms of policies/configuration in websense, I just wondered where we'd start? Is there like a management console where all the settings/policies can be exported from?
Commented:
Yes there is a console in which you can export the configuration. But till version 7.5 you can export the configuration to Excel, and you cannot import it to another Websense instance. You will only have a reference of your setup to copy it. Don't know if this has changed in recent versions or not.
If you are planning to move a Websense from a server to another, then you can use backup and restore, but this won't work if you want to 'COPY' the configuration.

Ehab
Acronis in Gartner 2019 MQ for datacenter backup

It is an honor to be featured in Gartner 2019 Magic Quadrant for Datacenter Backup and Recovery Solutions. Gartner’s MQ sets a high standard and earning a place on their grid is a great affirmation that Acronis is delivering on our mission to protect all data, apps, and systems.

Author

Commented:
Do you have any specific suggestions for a websense audit/healthcheck. i.e. a top 10 checks to look at the overall usage/configuration of websense

Author

Commented:
I dont suppose you could provide a screenshot on how to do the export and what format it will come out in ?? i.e. a sample output...
amatson78Sr. Security Engineer

Commented:
Two helpful pages are the "Today" and "Alert" pages in the Websense Manager. The today page will show you a quick overview of stats and web usage including categories blocked, security risks, etc. The Alerts page will show you if a component is down, offline, etc.
amatson78Sr. Security Engineer

Commented:
As far as backing up  there are two tools you can use. One is WsBackup which takes a snapshot of the setting and configuration of your Websense installation. The second is PgSetup which is a PostgreSQL tool that is used to backup the PostgreSQL database which contains all of your policies, etc.

WsBackup will also backup the policies but can only be restored to the same version of Websense. PgSetup is used more for upgrades and migrating policies.

http://www.websense.com/support/article/t-kbarticle/v7-How-do-I-back-up-my-Websense-filtering-configuration-1258048449474

Author

Commented:
Thanks

>>I dont suppose you could provide a screenshot on how to do the export and what format it will come out in ?? i.e. a sample output...

Commented:
Unfortunately, I no longer work on Websense now but I will try to get some help for you. Which version are you using?
amatson78Sr. Security Engineer

Commented:
My pleasure. What version of Websense are you running? Any other specific questions I can help with?

Alan

Author

Commented:
currently 7.5, thank you
amatson78Sr. Security Engineer

Commented:
I would recommend upgrading to 7.6.2 which fixes a lot of issues with the 7.5 series and makes management easier with the updated TRITON Manager console. If you have any specific questions let me know.

Alan

Author

Commented:
I was just really after if you were doing an audit/healthcheck of websense, as a previous admin of websense,

a) how you can see whats been configured
b) Specific areas of concern that youd check thoroughly

The only sample audit program offering for websense I found focused on:

"application/protocol controls"
"authentication"
"admin delegation"
"policy assessment"

But provided no more detail than areas to check..

I was just after some further input into what testing could be done (and how to do so) in these areas and where in websense they can be checked...

Author

Commented:
Just as a general question, I am behind a websense installation and most sites are either blocked or fall into quota time. From within the console, I assume you can make some folk exempt from some of the blocked site policies so they can access them, can this be viewed in websense console easily enough?

Author

Commented:
Anyone still willing to help?

Commented:
Yes, sure
You need to add the users/groups, create policies and then apply policies to the users/groups.
It's quite straight forward...

Author

Commented:
Thanks. Can these policies be exported into any sort of management freindly report, so we can see whats been setup? Or so a new websense admin knows whats been setup? And will it be easy on the eye as to what the policies represent in terms of who can access what?

Commented:
He can look into the console, this will be the easiest way to get info. You can export the settings to Excel format as well, but depending on your setup, it might be too long.

Author

Commented:
I dont suppose you can show a sample export just so I can see how it looks, by all means redact names etc./

Author

Commented:
And a list of who can access the console would be very interesting, and who can read only, who can amend polcies etc.

Commented:
This is how to export policies:
http://www.websense.com/support/article/kbarticle/Export-all-policies-and-custom-URLs

Attached is a sample export.

List of users who can access the console can ve viewed on the console directly.
websense.xlsx

Author

Commented:
Thank you!

So in your case theres groups:

* Global

Block All

Limited

Limited BW

Managers

Power Users

Special Users


And you add users to these groups?

Can this be seen in the console to, i.e. which users are in which groups

Commented:
Yes, you can also use Active Directory groups if you have AD.

Author

Commented:
Where can you see who is in which group, if in console can you be specific as I need an admin to produce a list. Same for seeing who can access the console, where exactly can I see this? Thank you!!

Also - how can you see which groups can access what? For example that xlst file lists categories of websites, and then it has "basic filter" block/permit, so is that for all groups, or just some? If its block for all groups, how is there any need for different groups?

Cheers

Author

Commented:
Do you admin websense email as well? Or just the internet filter?

Commented:
I only admin Websense Web filter.

Author

Commented:
Where can you see who is in which group, if in console can you be specific as I need an admin to produce a list. Same for seeing who can access the console, where exactly can I see this? Thank you!!

Also - how can you see which groups can access what? For example that xlst file lists categories of websites, and then it has "basic filter" block/permit, so is that for all groups, or just some? If its block for all groups, how is there any need for different groups?

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial