Installation guide

Sun Java System Web Proxy Server  19
Chapter 2: Network Configuration
For information about supported versions of these web servers, see the
Deployment Guide for Websense Enterprise and Web Security Suite.
 Websense Transparent Identification Agents: If you want to apply
user- and group-based filtering policies, Websense software must be able
to identify a user making a request, given the originating IP address.
Installing a Websense transparent identification agent allows Websense
software to filter internet requests from users in your directory service,
without prompting users to log on to the browser. A transparent
identification agent can be used if your integration product does not send
user information for some or all users to the Websense Filtering Service.
DC Agent, eDirectory Agent, Logon Agent, and RADIUS Agent are the
available Websense transparent identification agents. The following
descriptions provide information about selecting and installing the
appropriate agent(s) to identify users in your network.
 DC Agent: Installed in networks using a Windows directory service
(NTLM-based or Active Directory). DC Agent can be installed on
any Windows or Linux machine in the network, either on the same
machine as other Websense components, or on a different machine.
• For small to medium networks, Websense, Inc., recommends that
you install only one DC Agent per domain. If you have a large,
distributed network with many domain controllers on the same
domain, you can install multiple DC Agents. Installing DC Agent
on the domain controller machine is not recommended. DC Agent
can be installed on any network segment as long as NetBIOS is
allowed between the DC Agent and the domain controllers.
Setting up the DC Agent in the DMZ is not recommended.
• You may install DC Agent and RADIUS Agent together on the
same machine or on separate machines in your network.
• DC Agent and eDirectory Agent can be installed in the same
network, but cannot be active at the same time, since Websense
software does not support communication with both Windows and
Novell directory services simultaneously. Do not install DC Agent
and eDirectory Agent on the same machine.
Note
If you do not have one of the supported web servers on
your system, the Websense installer provides the option of
installing the Apache HTTP Server.