Websense Proxy ICAP Intergration

=== Applies To ===

  • Linux OS
  • DLP Enforce 11.6.1
  • Websense Web Security 7.7.0

=== Problem Summary ===
Customer wants to integrate Prevent for Web with Websense. Tested on Websense Web Security version 7.7.0 and supported on Websense proxy servers:

  • Websense Appliance V5000, V10000, with Websense Web Security version 7.6.0

 

  • Does not support redaction.
  • Only supports "Block HTTP/HTTPS".
  • RESPMOD is not supported.

=== Solution ===
Customer has to configure Websense appropriately to send traffic to DLP Prevent web.
Please use link to Websense DLP integration document.
Key steps on Websense:

  1. ICAP Server URL has to use REQMOD (Request Mode)
    ie: icap://DLP_PREWEB:1344/REQMOD
  2. For SSL content evaluation: "Analyze HTTPS Content" must be enabled. Websense must be running SSL Manager to send HTTPS traffic to the DLP server.

Key steps on DLP Prevent Web:

  1. Use the "Request Filtering/Response Filtering", Ignore Requests Smaller Than = 512 Bytes
  2. Configure a Policy Group for testing to just the Prevent for Web servers.
Have more questions? Submit a request

0 Comments

Please sign in to leave a comment.