WEBSENSE WEB SECURITY SUITE QUICK START GUIDE

Transcription

1 WEBSENSE WEB SECURITY SUITE QUICK START GUIDE Websense Web Securty Sute Websense Web Securty Sute Corporate Edton Websense Web Securty Sute Lockdown Edton Websense Web Securty Sute Lockdown Corporate Edton v6.2 Contents Usng Ths Quck Start Gude Installaton Gudes New Installatons Before You Install Wndows Solars and Lnux Upgradng Evaluatng the Web Securty Sute Before You Upgrade Wndows Solars or Lnux Intal Confguraton

2 , Websense, Inc Sorrento Valley Rd., San Dego, CA 92121, USA All rghts reserved. Publshed Aprl 5, 2006 Prnted n the Unted States of Amerca and Ireland MAN-WSSQS Ths document may not, n whole or n part, be coped, photocoped, reproduced, translated, or reduced to any electronc medum or machne-readable form wthout pror consent n wrtng from Websense, Inc. Every effort has been made to ensure the accuracy of ths manual. However, Websense, Inc., makes no warrantes wth respect to ths documentaton and dsclams any mpled warrantes of merchantablty and ftness for a partcular purpose. Websense, Inc., shall not be lable for any error or for ncdental or consequental damages n connecton wth the furnshng, performance, or use of ths manual or the examples heren. The nformaton n ths documentaton s subject to change wthout notce. Trademarks Websense and Websense Enterprse are regstered trademarks of Websense, Inc. n the Unted States and certan nternatonal markets. Websense has numerous other unregstered trademarks n the Unted States and nternatonally. All other trademarks are the property of ther respectve owners. Wndows s a regstered trademark of Mcrosoft Corporaton n the Unted States and/or other countres. Solars s a regstered trademark of Sun Mcrosystems, Inc. n the Unted States and other countres. Lnux s a trademark of Lnus Torvalds n the Unted States and other countres. Ths product ncludes software developed by the Apache Software Foundaton ( Copyrght (c) 2000 The Apache Software Foundaton. All rghts reserved. WnPcap Copyrght (c) NetGroup, Poltecnco d Torno (Italy). Copyrght (c) 2006 CACE Technologes, Davs (Calforna). All rghts reserved. Redstrbuton and use n source and bnary forms, wth or wthout modfcaton, are permtted provded that the followng condtons are met: Redstrbutons of source code must retan the above copyrght notce, ths lst of condtons and the followng dsclamer. Redstrbutons n bnary form must reproduce the above copyrght notce, ths lst of condtons and the followng dsclamer n the documentaton and/or other materals provded wth the dstrbuton. Nether the name of the Poltecnco d Torno, CACE Technologes nor the names of ts contrbutors may be used to endorse or promote products derved from ths software wthout specfc pror wrtten permsson. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EX- PRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPE- CIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFT- WARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

3 Web Securty Sute Quck Start Gude The Websense Web Securty Sute offers a comprehensve web securty soluton for organzatons concerned wth protectng ther networks from web-based threats. These robust web securty products fll n the tme and technology gaps that antvrus software and frewall products cannot address. The Websense securty soluton s comprsed of these products and features: Websense Web Securty Sute: Provdes web-based securty protecton, ncludng the followng features: Blocks spyware, malcous moble code, and other web-based threats Blocks keyloggng transmssons back to ther host stes Protects employees and organzatons from phshng and other frauds Scans all ports for HTTP traffc to protect aganst threats that use non-standard ports Manages malcous traffc through protocols to protect aganst bots and bot networks, and to detect emal-borne worms Manages nstant messagng attachments Provdes mmedate protecton from new securty threats wth Real-Tme Securty Updates Includes a subscrpton to Websense Securty Labs Securty Alerts, and the ThreatWatcher, SteWatcher, and BrandWatcher servces Websense Web Securty Sute Lockdown Edton : Includes all of the features of Websense Web Securty Sute, plus addtonal components for endpont securty: Stops the executon of unauthorzed applcatons, such as spyware, peer-to-peer (P2P) fle sharng, and hackng tools on the desktop Provdes enhanced end-pont securty for moble computng Provdes maxmum control over desktop envronments by allowng only approved applcatons to run on corporate workstatons and servers through advanced lockdown features Websense Web Securty Sute Corporate Edton: Includes all of the features of Websense Web Securty Sute, plus addtonal features for large or decentralzed enterprses, ncludng Delegated Admnstraton and Reportng, Audtng, and SNMP Alertng. Websense Web Securty Sute Lockdown Corporate Edton: Includes all of the features of Websense Web Securty Sute Lockdown Edton, plus addtonal features for large or decentralzed enterprses, ncludng Delegated Admnstraton and Reportng, Audtng, and SNMP Alertng. Websense Web Securty Sute Reportng: Provdes advanced reportng tools for detectng and analyzng securty rsks and nternet actvty. The reportng module s ncluded wth all four products lsted above. Usng Ths Quck Start Gude The purpose of ths Quck Start Gude s to act as a startng pont for nstallaton of your Web Securty Sute. It provdes nstallaton and ntal confguraton nstructons that are specfc to Web Securty Sute and are not found n any other document. Detaled nstallaton nstructons and setup nformaton can be found n the Websense documentaton referenced n ths Quck Start Gude. Websense Web Securty Sute 3

4 Web Securty Sute Quck Start Gude Installaton Gudes Before you begn nstallng the Web Securty Sute or upgradng your current Websense system, have the current versons of the approprate nstallaton gudes avalable. Product documentaton can be obtaned from: New Installatons NOTE If you are an exstng Websense Enterprse customer, upgrade your current system before nstallng the addtonal Web Securty Sute modules. Turn to Upgradng, page 8 for nstructons. Websense Enterprse Deployment Gude: Refer to ths gude frst to decde how you wll deploy the Web Securty Sute n your envronment. Three modules are avalable n the Websense Web Securty Sute nstaller; the approprate nstallaton gude for use wth each module s lsted below. The frst two modules are ncluded n all Web Securty Sute products, whle the thrd s avalable only wth Websense Web Securty Sute Lockdown Edton and Websense Web Securty Sute Lockdown Corporate Edton. Web Securty Sute module: Refer to the Websense Enterprse nstallaton gude for use wth your frewall, proxy server, or network applance. Web Securty Sute Reportng module: Refer to the Websense Enterprse Reportng Installaton Gude. For nstallaton on Unx machnes, you wll also need to refer to the Websense Enterprse Explorer for Unx Admnstrator s Gude. Web Securty Sute Lockdown Edton module: Refer to the Websense Clent Polcy Manager Installaton Gude for nformaton about nstallng Lockdown components. The Web Securty Sute module nstalls on Wndows, Solars, or Lnux. The Reportng and Lockdown modules nstall on Wndows only. You must restart the Websense Web Securty Sute nstaller each tme you nstall one of the modules. NOTE You can also nstall the Explorer component of the Reportng module on Solars or Lnux by usng the Explorer for Unx nstaller. See Solars and Lnux, page 7 for more nformaton. Install the Websense Web Securty Sute modules n the followng order: 1. Web Securty Sute module 2. Web Securty Sute Reportng module 3. Web Securty Sute Lockdown Edton module (avalable only wth Web Securty Sute Lockdown Edton and Web Securty Sute Lockdown Corporate Edton) Websense Manager, the admnstratve nterface for the Web Securty Sute, s not supported on Lnux. If you nstall the Web Securty Sute on Lnux, you must nstall Websense Manager on a Wndows or Solars machne. 4 Websense, Inc.

5 Before You Install Web Securty Sute Quck Start Gude Before you attempt to nstall the Web Securty Sute, revew the followng nformaton: Wndows Deployment: Decde how the product wll be deployed n your network. Lke all Websense products, Web Securty Sute components can be nstalled together or dstrbuted across your network, dependng upon your topology and traffc load. For nstructons on decdng how best to deploy ths product n your network, refer to the Websense Enterprse Deployment Gude. Network prerequstes: There are a number of preparatons that must be completed before your network s ready to nstall the Web Securty Sute modules. For specfc prerequste tasks, refer to the approprate nstallaton gude. Integraton product: If you are nstallng the Web Securty Sute on the same machne as an ntegraton product (frewall, proxy server, or network applance), you may need to stop the ntegraton product before nstallng Websense. See your Websense Enterprse nstallaton gude for nstructons. In some cases, nstallng Websense products on the same machne as the ntegraton product s not recommended. Downloadng the nstaller: You must download the Web Securty Sute nstaller package onto each machne n your network where you ntend to nstall a Websense component. If you plan to dstrbute ndvdual Websense components n your network, consult the Websense Enterprse Deployment Gude frst. Subscrpton key: The Web Securty Sute nstaller allows you to download the Websense Master Database durng nstallaton f you enter a vald subscrpton key or evaluaton key. If you do not enter a key when prompted by the nstaller, you must download the Master Database after nstallaton by enterng your key n the Websense Manager. To nstall the Web Securty Sute on a Wndows machne: 1. Log on to the nstallaton machne wth doman and local admnstrator prvleges. The User Servce and DC Agent components must have admnstrator prvleges on the network to retreve user logon nformaton from the doman controller. 2. Close applcatons runnng on the nstallaton machne and turn off any antvrus software. 3. Download the Web Securty Sute nstaller package (WebSecurty62_Setup.exe) from to a folder on the nstallaton machne, and doubleclck to extract the nstaller fles. A screen dsplays nstructons for extractng the setup program. 4. Browse to a destnaton folder or type n a path for the nstaller to create. Do not extract the nstaller fles to a folder on your desktop. Ths may prevent some components from recevng the IP address of the Polcy Server machne. Accept the default locaton of C:\Temp or select another approprate folder. 5. Clck Extract to begn decompressng the fles. If confgured to do so, Setup.exe runs automatcally after the fles are decompressed. Websense Web Securty Sute 5

6 Web Securty Sute Quck Start Gude 6. Clck Next n the welcome screen. 7. Read the subscrpton agreement, accept the terms, and clck Next to contnue. 8. In the product selecton screen, select the edton of Web Securty Sute you want to nstall: Web Securty Sute or Web Securty Sute Corporate Edton: Provdes web securty and reportng features Web Securty Sute Lockdown Edton or Web Securty Sute Lockdown Corporate Edton: Provdes web securty and reportng features, plus desktop securty 9. Clck Next to contnue. An nformaton screen appears, lstng the order n whch the modules of the Web Securty Sute must be nstalled. Installng n the proper sequence s mportant because of the shared components. 10. Clck Next to contnue. The modules for the edton of Web Securty Sute that you selected n Step 8 are dsplayed, n the order they must be nstalled: Web Securty Sute components: Select to nstall the module that provdes web securty features. Web Securty Sute Reportng components: Select to nstall the module that provdes reportng features. Web Securty Sute Lockdown Edton components: Select to nstall the module that provdes desktop securty. (Ths opton appears only f you selected Web Securty Sute Lockdown Edton or Web Securty Sute Lockdown Corporate Edton.) 11. Select the approprate module to nstall, and then clck Next to begn the nstallaton sequence. Web Securty Sute components should always be nstalled frst. Websense does not recommend nstallng all of the Web Securty Sute modules on the same machne. See the Websense Enterprse Deployment Gude for nformaton about deployng the Web Securty Sute and Web Securty Sute Reportng components n your envronment. See the Websense Clent Polcy Manager Installaton Gude for nformaton about deployng the Web Securty Sute Lockdown Edton components. 12. Refer to the approprate Websense nstallaton gude to complete the nstallaton of the Web Securty Sute components. To access the nstallaton gude for use wth your ntegraton product, use the documentaton lnk provded n Installaton Gudes, page Run the Wndows nstaller on a separate machne to nstall the Web Securty Sute Reportng components. Then, f you selected the Web Securty Sute Lockdown Edton or Web Securty Sute Lockdown Corporate Edton n Step 8, run the Wndows nstaller on a separate machne to nstall the Lockdown Edton components. Make sure you have the approprate nstallaton gudes avalable before attemptng to nstall these components. For more nformaton, see Installaton Gudes, page If you turned off any antvrus software durng nstallaton, remember to turn t back on when nstallaton s complete. 6 Websense, Inc.

7 Solars and Lnux Web Securty Sute Quck Start Gude Websense Manager, the admnstratve nterface for the Web Securty Sute, s not supported on Lnux, and must be nstalled on ether a Wndows machne or a Solars machne. You can nstall Websense Manager after you fnsh nstallng the Web Securty Sute. To nstall the Web Securty Sute on a Solars or Lnux machne: 1. Log on to the nstallaton machne as the root user. 2. Close applcatons runnng on the nstallaton machne and turn off any antvrus software. 3. Create a setup drectory. For example: /root/websense_setup 4. Download the nstaller fle for your operatng system from Downloads/ and save t to the setup drectory. Solars: WebSecurty62_Setup_Slr.tar.gz Lnux: WebSecurty62_Setup_Lnx.tar.gz 5. Enter the followng command to unzp the fle: gunzp <download fle name> For example: gunzp WebSecurty62_Setup_Slr.tar.gz 6. Expand the fle nto ts components wth the followng command: tar xvf <unzpped fle name> For example: tar xvf WebSecurty62_Setup_Lnx.tar 7. Run the nstallaton program from the setup drectory wth the followng command:./nstall.sh To run the GUI verson of the nstaller (Englsh language systems only), use the followng command:./nstall.sh -g 8. Proceed through the followng screens: Welcome Screen: Press Enter to contnue. Subscrpton Agreement: Read the subscrpton agreement, accept the terms, and press Enter to contnue. Product Selecton: Select the edton of Web Securty sute you plan to nstall and press Enter to contnue. Web Securty Sute or Web Securty Sute Corporate Edton: Provdes web securty and reportng features Web Securty Sute Lockdown Edton or Web Securty Sute Lockdown Corporate Edton: Provdes web securty and reportng features, plus desktop securty Installaton Sequence: Make sure you read the nformaton n ths screen and understand the Web Securty Sute nstallaton sequence: Web Securty Sute module Web Securty Sute Reportng module (Reporter component nstalls only on Wndows; Explorer component nstalls on Solars, Lnux, and Wndows) Web Securty Sute Lockdown Edton module (Wndows only). Ths module s ncluded only f you selected Web Securty Sute Lockdown Edton or Web Securty Sute Lockdown Corporate Edton. Websense Web Securty Sute 7

8 Web Securty Sute Quck Start Gude Websense Manager s not supported on Lnux. If you nstall the Web Securty Sute on Lnux, you must nstall Websense Manager on a Wndows or Solars machne. Upgradng 9. Press Enter to begn nstallaton of the components n the Web Securty Sute module. 10. Refer to the approprate Websense nstallaton gude to complete the nstallaton of the Web Securty Sute components. To access the nstallaton gude for use wth your ntegraton product, use the documentaton lnk provded n Installaton Gudes, page If you nstalled the Web Securty Sute components on Lnux, you must nstall Websense Manager on a Solars or Wndows machne. Run the Solars or Wndows nstaller on the machne you want to use for Websense admnstraton, select a Custom nstallaton, and choose Websense Manager. Refer to your nstallaton gude for more nformaton. 12. Run the Wndows nstaller on a separate Wndows machne to nstall the Web Securty Sute Reportng components. Make sure you have the approprate nstallaton gude avalable before attemptng to nstall these components. For more nformaton, see Installaton Gudes, page If the Web Securty Sute Lockdown Edton or Web Securty Sute Lockdown Corporate Edton was selected, run the Wndows nstaller on a separate Wndows machne to nstall the Lockdown components. Make sure you have the approprate nstallaton gude avalable before attemptng to nstall these components. For more nformaton, see Installaton Gudes, page If you turned off any antvrus software durng nstallaton, remember to turn t back on when nstallaton s complete. Prevous versons of the Web Securty Sute or Web Securty Sute Lockdown Edton can be upgraded drectly to any of the verson 6.2 Web Securty Sute products. In addton, exstng Websense Enterprse, Websense Enterprse Reportng, and Websense Clent Polcy Manager systems, verson 5.5 and hgher, can be upgraded drectly to the approprate Web Securty Sute module. You must run the Web Securty Sute nstaller on each machne where a Websense component s nstalled. The nstaller detects all Websense components of verson 5.5 or hgher on that machne and upgrades them accordngly. Make sure to observe the followng nstallaton sequence when upgradng a Websense Enterprse system to the Web Securty Sute: NOTE If you want to nstall the Explorer component of the Web Securty Sute Reportng module on a Solars or Lnux machne, you must run the Websense Enterprse Explorer for Unx nstaller. Use the documentaton lnk provded n Installaton Gudes, page 4 to access nstallaton nformaton. Frst, upgrade Websense Enterprse components to Web Securty Sute components. Next, upgrade Websense Enterprse Reportng components to Web Securty Sute Reportng components. Fnally, upgrade Websense Clent Polcy Manager components to Web Securty Sute Lockdown Edton components. 8 Websense, Inc.

9 Web Securty Sute Quck Start Gude If you are runnng a verson of Websense Enterprse pror to v5.5, you must perform an ntermedate upgrade frst to brng your verson level up to v5.5. For nstructons and lnks to the v5.5 nstaller for your operatng system, consult the Websense Enterprse nstallaton gude for your ntegraton at: Evaluatng the Web Securty Sute Exstng Websense customers who want to evaluate the Web Securty Sute should contact Customer Care to obtan an evaluaton key: Before You Upgrade Customer Care U.S. n San Dego, Calforna: (from the U.S.only) or , or customercare@websense.com Customer Care Internatonal n Dubln, Ireland: +353 (0) or ntcustcare@websense.com Before you upgrade your exstng Websense system, consult the approprate nstallaton gude for specfc procedures that must be performed pror to runnng the Web Securty Sute nstaller. It s advsable to perform the followng tasks n all cases: Wndows Restart Websense servces. If your Websense servces have been runnng unnterrupted for several months, the nstaller may have dffculty stoppng them. To prevent the upgrade process from tmng out and falng, stop the servces manually, then restart them agan before begnnng the upgrade. Back up necessary fles. Make sure to back up the latest Websense Enterprse confguraton (confg.xml) and the ntalzaton fles (websense.n, emserver.n) from the \Websense\bn folder to a safe locaton. You may need these fles f you encounter any problems durng the upgrade. NOTE If you are concerned about a fallback strategy, consder makng an entre system backup. Ths wll allow you to restore your current producton system wth a mnmum of downtme. On a Wndows machne, follow the steps n ths secton to upgrade Websense Enterprse v5.5 or hgher to a Web Securty Sute product. You can also use these steps to upgrade an earler verson of the Web Securty Sute. If you have dstrbuted Websense components across dfferent machnes n your network, be sure to upgrade the Polcy Server machne frst. 1. Log on to the nstallaton machne wth doman and local admnstrator prvleges. The User Servce and DC Agent components must have admnstrator prvleges on the network to retreve user logon nformaton from the doman controller. Websense Web Securty Sute 9

10 Web Securty Sute Quck Start Gude 2. Close applcatons runnng on the nstallaton machne and turn off any antvrus software. 3. Close all Websense Managers that connect to the Polcy Server you are upgradng. 4. Download the Web Securty Sute nstaller package (WebSecurty62_Setup.exe) from to a folder on the nstallaton machne, and doubleclck to extract the nstaller fles. A screen dsplays nstructons for extractng the setup program. 5. Browse to a destnaton folder or type n a path for the nstaller to create. Do not extract the nstaller fles to a folder on your desktop. Ths may prevent some components from recevng the IP address of the Polcy Server machne. Accept the default locaton of C:\Temp or select another approprate folder. 6. Clck Extract to begn decompressng the fles. If confgured to do so, Setup.exe runs automatcally after the fles are decompressed. 7. Clck Next on the welcome screen and follow the on-screen nstructons through the subscrpton agreement. The Web Securty Sute Setup detects the Websense components from your earler verson and asks you how you want to proceed. 8. Select Upgrade, and then clck Next. A lst of currently runnng Websense servces from the earler verson appears. A message explans that the nstaller must stop these servces before the upgrade can proceed. 9. Clck Next to check the system requrements and begn the upgrade. The nstaller wll fnd all exstng Websense components on the machne and upgrade them to the new verson of Web Securty Sute components. Refer to the upgrade secton of the approprate Websense nstallaton gude to complete the upgrade of your exstng Websense components. To access the gude for your component, use the documentaton lnk provded n Installaton Gudes, page Run the Web Securty Sute nstaller on each machne contanng a Websense product that you ntend to upgrade, makng sure to observe the proper nstallaton sequence when upgradng. 11. If you turned off any antvrus software durng nstallaton, remember to turn t back on when the upgrade s complete. Solars or Lnux On a Solars or Lnux machne, follow the steps n ths secton to upgrade Websense Enterprse v5.5 or hgher to a Web Securty Sute product. You can also use these steps to upgrade an earler verson of the Web Securty Sute. If you have dstrbuted Websense components across dfferent machnes n your network, be sure to upgrade the Polcy Server machne frst. 1. Log on to the nstallaton machne as the root user. 2. Close applcatons runnng on the nstallaton machne and turn off any antvrus software. 10 Websense, Inc.

11 Web Securty Sute Quck Start Gude 3. Close all Websense Managers that connect to the Polcy Server you are upgradng. 4. Create a setup drectory. For example: /root/websecurty_setup 5. Download the nstaller fle for your operatng system from Downloads/ and save t to the setup drectory you created. Solars: WebSecurty62_Setup_Slr.tar.gz Lnux: WebSecurty62_Setup_Lnx.tar.gz 6. Enter the followng command to unzp the nstaller fle: gunzp <download fle name> For example: gunzp WebSecurty62_Setup_Slr.tar.gz 7. Expand the fle nto ts components wth the followng command: tar xvf <unzpped fle name> For example: tar xvf WebSecurty62_Setup_Lnx.tar.gz 8. Run the nstallaton program from the drectory n whch t resdes wth the followng command:./nstall.sh To run the GUI verson of the nstaller (Englsh language systems only), use the followng command:./nstall.sh -g 9. Follow the upgrade sequence: Welcome Screen: Press Enter to contnue. Subscrpton Agreement: Agree wth the terms and press Enter to contnue. Websense Upgrade: The Web Securty Sute Setup detects the components from your earler verson and asks you how you want to proceed. Select Upgrade, and then press Enter. Websense Servces: A lst of currently runnng Websense servces from the earler verson appears. A message explans that the nstaller must stop these servces before the upgrade can proceed. 10. Press Enter to begn the upgrade. The nstaller wll fnd all exstng Websense components on the machne and upgrade them to new Web Securty Sute components. Refer to the upgrade secton of the approprate Websense nstallaton gude to complete the upgrade of your exstng Websense components. To access the gude for your component, use the documentaton lnk provded n Installaton Gudes, page Run the Web Securty Sute nstaller on each machne contanng a Websense product that you ntend to upgrade, makng sure to observe the proper nstallaton sequence when upgradng. 12. If you turned off any antvrus software durng nstallaton, remember to turn t back on when the upgrade s complete. Websense Web Securty Sute 11

12 Web Securty Sute Quck Start Gude Intal Confguraton Once you have nstalled the Web Securty Sute, you wll need to perform a few ntal confguraton steps to get started. 1. Actvate your subscrptons to ThreatWatcher, SteWatcher, BrandWatcher, and Websense Securty Labs Securty Alerts: a. Go to log n, and enter your Web Securty Sute subscrpton key. b. On your My Websense man page, go to the Websense Securty Labs box. Ths box dsplays the securty servces ThreatWatcher, SteWatcher, BrandWatcher, and Securty Alerts that are ncluded wth Web Securty Sute. c. Clck Sgn Up besde each of the servces n turn, and follow the on-screen nstructons. 2. To manage nstant messagng attachments, you must confgure Network Agent, the product component that handles protocol management. For more nformaton, refer to the Network Agent chapter n the Websense Enterprse Admnstrator s Gude. Ths document s nstalled wth the Web Securty Sute and s also avalable at ProductDocumentaton. Once Network Agent has been confgured, you can learn how to customze handlng of nstant messagng attachments by referrng to the Instant Messagng Attachment Manager secton of the Websense Enterprse Admnstrator s Gude. 3. In the Web Securty Sute, Network Agent s confgured to automatcally scan all ports for HTTP traffc. If you are usng Network Agent wth an ntegraton product, you must confgure Network Agent not to montor the ports that your ntegraton product s confgured to montor. Refer to the Network Agent chapter n the Websense Enterprse Admnstrator s Gude for nstructons. 4. To block access to webstes and protocols assocated wth spyware, phshng, keyloggng, and malcous moble code: If you are a new Websense customer, the default polcy n effect when you frst nstall the Web Securty Sute wll block access to these stes and protocols. Refer to the Websense Enterprse Admnstrator s Gude to learn how to customze securty and flterng polces for users n your network. If you are an exstng Websense Enterprse customer who s upgradng to a Web Securty Sute, you must confgure the Premum Group for securty and the Securty Protocol Groups n your exstng polces n order to block access to these stes and protocols. For more nformaton, refer to the Websense Enterprse Admnstrator s Gude. NOTE Real-Tme Securty Updates are enabled when you nstall the Web Securty Sute. You do not have to take any acton to start ths servce. When Websense dentfes a webste as a securty threat, your local database wll be automatcally updated wthn mnutes. Refer to the documentaton set that was nstalled wth Web Securty Sute to learn how to confgure and use each of the product components. 12 Websense, Inc.