Installation guide

216 Websense Installation Guide
Chapter 5: Initial Setup
Firewall Configuration for Remote Filtering
Remote Filtering is an optional Websense service that allows you to filter user
workstations located outside your organization’s network firewall. If you
installed the Remote Filtering components, some firewall configuration is
necessary to enable web filtering on remote workstations. Firewalls must be
configured to allow the Remote Filtering Server to communicate with the
remote workstations and with the Filtering Service.
Enabling communication between Remote Filtering Server
and Remote User Workstations
The external network firewall and any additional firewalls located between
the Remote Filtering Server machine and the remote workstations should be
configured as follows:
Open the Remote Filtering Servers External Communication Port on
these firewalls to accept connections from Remote Filtering Clients on
workstations located outside the network firewall. By default, this is port
80, unless it was changed during installation of the Remote Filtering Server.
Block connections to the Remote Filtering Servers Internal
Communication Port from workstations located outside the network
firewall. By default, this is port 8800, unless it was changed during
installation of the Remote Filtering Server.
See the documentation for your firewall product if you need information
about how to accomplish these firewall configuration tasks.
Enabling communication between Remote Filtering Server
and Filtering Service
If there is a firewall between the Remote Filtering Server machine and the
Filtering Service machine, configure it as follows:
Open the Filtering Service’s Filter port (by default, 15868) on this
firewall to accept connections from the Remote Filtering Server.
Open the Filtering Service’s Block Page port (by default, 15871) on this
firewall to allow Filtering Service to serve block pages to remote users.