[isalist] Re: ISA 2006 & Websense

  • From: "Ball, Dan" <DBall@xxxxxxxxxxx>
  • To: "'isalist@xxxxxxxxxxxxx'" <isalist@xxxxxxxxxxxxx>
  • Date: Fri, 29 May 2009 08:37:08 -0400

I'm drooling already...


From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of Thomas W Shinder
Sent: Friday, May 29, 2009 8:30 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: ISA 2006 & Websense

Hi Andrew,

If you want a more cost effective solution to Websense, make sure to check out 
the next version of the ISA firewall, which will be the TMG firewall. It will 
have integrated URL filtering and the categorization is pretty nice, and a heck 
of a lot cheaper.



____________________________________________
TOM SHINDER   |   Sr. Consultant/Technical Writer
206.443.1117   |   SHINDER@xxxxxxxxxxxxxxx<mailto:shinder@xxxxxxxxxxxxxxx>

5701 Sixth Avenue South   |   Seattle, WA 98108
PROWESS   |   WWW.PROWESSCORP.COM<http://www.prowesscorp.com/>
____________________________________________
[cid:image001.png@01C9E038.A7180750]<http://www.windows.com/>

From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of Andrew Hodgson
Sent: Friday, May 29, 2009 6:45 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: ISA 2006 & Websense

Hi,

I put the Websense components on the other server because that server also does 
the logging of Internet activity - originally on 6.x I used the MSDE but due to 
the sizes of database, on the new 7.0.1 box I used a full SQL Server.

You can upscale to many Websense servers and database servers, depending on the 
traffic requirement.  With our number of users, the recommendation was to split 
out the ISA server, the Websense policy server, and the Websense reporting 
server, but I did all Websense components (including database) on the same box, 
and the load is fine.

I didn't want all that hanging about on the ISA box!

Our management have been unhappy with the categories on the Websense side for a 
while, and want a cheaper solution.  This will probably take the form of an 
appliance, which means our ISA server would be used for Exchange publishing 
only.  There are quite a few good deals that we have been offered for a 3 year 
license up front, which come out quite cheaper than the same 3 years on 
Websense.  There are hardware costs to factor in, of course.

Thanks.
Andrew.

From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of Ball, Dan
Sent: 29 May 2009 12:38
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: ISA 2006 & Websense

So both of you found you had to run two servers for this?  How much of a load 
does it add?

From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of D PIETRUSZKA USWRN INTERLINK INFRA SHIFT MGR
Sent: Friday, May 29, 2009 7:13 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: ISA 2006 & Websense

I'm using Websense with ISA as well without any problem, I'm running ISAS 2006 
enterprise and Websense 6.3.
Just install websense integrated with ISA and allow the bunch of ports it need 
to the policy server as Andrew said and you will be up and running in no time.

Regards
Diego R. Pietruszka
MIS - Shift Manager
MSC (USA) - Interlink Transport Technologies
Direct Phone: (908)605-4147

From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of Andrew Hodgson
Sent: Friday, May 29, 2009 4:47 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: ISA 2006 & Websense

Hi,

Running ISA 2006 with Websense 7.0.1.

Install went very well, no major issues.

You need to allow ISA server to communicate via a firewall rule to the Websense 
policy server on the Websense specific ports.

All clients are proxy clients so I can't use the Websense protocol filtering 
definitions, though these are blocked via another firewall anyway.

I am not using any of the identification agents, using transparent 
authentication via the ISA Websense plugin - all clients must authenticate to 
the proxy.

Thanks.
Andrew.

From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of Ball, Dan
Sent: 28 May 2009 17:25
To: 'isalist@xxxxxxxxxxxxx'
Subject: [isalist] ISA 2006 & Websense

Anyone have Websense up and running with ISA2006?  I'm setting up a new server, 
and looking at installing that software now.


[cid:image002.jpg@01C9E038.A7180750]

allpay achieved PCI DSS and ISO 27001 certification in 2008
Registered in England No. 02933191. UK VAT Reg. No. 666 9148 88.

Telephone: 0844 225 5729, Fax: 0844 557 8350.
Website: www.allpay.net Email: enquiries@xxxxxxxxxx<mailto:enquiries@xxxxxxxxxx>

This email, and any files transmitted with it, is confidential and intended 
solely for the use of the individual or entity to whom it is addressed. If you 
have received this email in error please notify the allpay Information Security 
Manager at the number above.

PNG image

JPEG image

Other related posts: