Installation guide
28 Websense Installation Guide
Chapter 2: Network Configuration
When an LDAP directory service is enabled within Sun Java System Web
Proxy Server, the Websense software receives user information along with the
internet request. This allows the Websense software to filter directory objects
in an LDAP directory without requiring manual authentication.
Internet requests can be filtered based on policies assigned to individual
directory objects after the following tasks have been accomplished:
If you are using the Sun Java System Directory Server or Novell
Directory Services/eDirectory:
1. Enable the appropriate directory service in Websense Manager.
2. Enable the Websense software to identify users transparently with
Novell by installing and configuring the Websense eDirectory Agent.
3. Enable Websense manual authentication so that if the Websense
software is unable to identify users transparently, it will prompt users
to manually authenticate.
Detailed instructions for each of these tasks can be found in the User
Identification chapter in the Administrator’s Guide for Websense
Enterprise and Web Security Suite.
If you are using a Windows NTLM-based directory or Active Directory:
1. Configure the Windows directory service in Websense Manager.
2. Enable the Websense software to identify users transparently by
installing and configuring the Websense DC Agent and/or Logon Agent.
3. Enable Websense manual authentication so that if the Websense
software is unable to identify users transparently, it will prompt users
to manually authenticate.
Note
In any environment, Websense software can filter based on
workstation or network policies. Workstations are identified
within the Websense software by their IP addresses, and
networks are identified as IP address ranges.