Installation guide

Sun Java System Web Proxy Server  17
Chapter 2: Network Configuration
 If the Network Agent machine is connected to a switch or router,
configure the switch or router to use bi-directional port spanning
(mirroring).
If the span port on the switch or router is not capable of bi-directional
communication, two network interface cards (NICs) are required in
the installation machine: one NIC that can be configured for
monitoring, attached to the span port; and a second NIC that can be
configured for blocking, attached to a regular port. In this scenario,
one NIC is receiving data, and one NIC is transmitting data, so the
required two-way communication is provided by the two NICs in
combination. After installation, the NICs must be configured for
monitoring and blocking, respectively. For instructions, see the
Network Agent chapter in the Administrator’s Guide for Websense
Enterprise and Web Security Suite.
If you are installing Network Agent in a network that employs
switches, see the Switched Configuration section in the Deploying
Network Agent chapter of the Deployment Guide for Websense
Enterprise and Web Security Suite for additional information.
 For small to medium sized organizations, Network Agent can be
installed on the same server machine as the other Websense web
filtering components, assuming that the server meets the minimum
system requirements. For larger organizations, you may want to put
Network Agent on a separate, dedicated server to increase the amount
of traffic that can be managed.
 On larger networks, you may need to install multiple Network Agents
and assign them to monitor various IP address ranges in your
network. Make sure that the IP address ranges for each instance of
Network Agent do not overlap. Overlapping IP ranges result in
double logging. Deploy the Network Agents so that they can filter the
entire network. Partial deployment results in incomplete filtering by
protocol and bandwidth, as well as the loss of log data from network
segments not watched by Network Agent. To define IP address ranges
for multiple Network Agents, follow the instructions in the Network
Agent chapter of the Administrator’s Guide for Websense Enterprise
and Web Security Suite.