Reporting Installation Guide

Transcription

1 Reporting Installation Guide Websense Enterprise Websense Web Security Suite TM v6.3.1

2 , Websense, Inc. All rights reserved Sorrento Valley Rd., San Diego, CA 92121, USA Published April 17, 2007 Printed in the United States of America and Ireland The products and/or methods of use described in this document are covered by U.S. Patent Numbers 6,606,659 and 6,947,985 and other patents pending. This document may not, in whole or in part, be copied, photocopied, reproduced, translated, or reduced to any electronic medium or machine-readable form without prior consent in writing from Websense Inc. Every effort has been made to ensure the accuracy of this manual. However, Websense Inc., makes no warranties with respect to this documentation and disclaims any implied warranties of merchantability and fitness for a particular purpose. Websense Inc. shall not be liable for any error or for incidental or consequential damages in connection with the furnishing, performance, or use of this manual or the examples herein. The information in this documentation is subject to change without notice. Trademarks Websense and Websense Enterprise are registered trademarks of Websense, Inc. in the United States and certain international markets. Websense has numerous other unregistered trademarks in the United States and internationally. All other trademarks are the property of their respective owners. Microsoft, Windows, Windows NT, Windows Server, and Active Directory are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. Sun, Solaris, UltraSPARC, Sun Java System, and all Sun Java System based trademarks and logos are trademarks or registered trademarks of Sun Microsystems, Inc., in the United States and other countries. Netscape is a registered trademark of Netscape Communications Corporation in the U.S. and other countries. Netscape Navigator and Netscape Communicator are also trademarks of Netscape Communications Corporation and may be registered outside the U.S. edirectory and Novell Directory Services are a registered trademarks of Novell, Inc., in the U.S. and other countries. Adobe, Acrobat, and Acrobat Reader are either registered trademarks or trademarks of Adobe Systems Incorporated in the United States and/or other countries. Pentium is a registered trademark of Intel Corporation. Red Hat is a registered trademark of Red Hat, Inc., in the United States and other countries. Linux is a trademark of Linus Torvalds, in the United States and other countries. This product includes software distributed by the Apache Software Foundation ( Copyright (c) The Apache Software Foundation. All rights reserved. Other product names mentioned in this manual may be trademarks or registered trademarks of their respective companies and are the sole property of their respective manufacturers.

3 Contents Chapter 1 Preinstallation Information Reporting modules and components Online Help Technical Support Installation Checklist Chapter 2 System Requirements Selecting a database engine Database engine system requirements SQL Server/MSDE installation error messages Database version error messages Collation and case-sensitivity error messages Host machine and MSDE/SQL Server names error messages Database creation error messages Table creation error messages Installing with MSDE Installing with SQL Server 2000/ Configuring Microsoft SQL Server 2005 user roles Chapter 3 Selecting the Web Server and Setting Up Users Explorer with Microsoft IIS Web Server Explorer access requirements for the Temp directory Using Reporter Identifying users for Reporting tools and utilities Accessing Reporting tools Chapter 4 Running the Installer Downloading and unzipping the installation files Websense Enterprise Reporting Installation Guide 3

4 Contents How to use Websense Setup Installing the Websense Language Pack Languages available with the Language Pack What s translated? Websense Enterprise Reporter Websense Enterprise Explorer for Windows Installing an English version following a non-english version Installation concerns MSDE and SQL Server installation and configuration error messages. 38 Database engine location Minimizing database size Database location Connecting to a database Chapter 5 Removing Reporting Components Chapter 6 Upgrading and Migrating Upgrading Migrating a database When Migrate Utility controls are available Migrating a v5.5.x database Upgrading from MSDE to Microsoft SQL Server Appendix A Configuring for Windows Trusted Connection Log Server Service setup Reporter Scheduler Service setup Explorer Settings Page Configuring the IIS Web Server Index Websense Enterprise Reporting Installation Guide 4

5 CHAPTER 1 Preinstallation Information Information provided in this guide applies equally to Websense Enterprise and Websense Web Security Suite. Any information that pertains specifically to one of these products is noted separately. The same software is installed for these products, but the Web Security Suite features are enabled only if you enter a Web Security Suite subscription key. Before any Reporting modules are installed, Websense Enterprise must be installed and working. Install Websense Enterprise Reporting with the same version as Websense Enterprise. To successfully install Websense Enterprise Reporting, read the following topics. Reporting modules and components, page 6 Installation Checklist, page 9 Websense Enterprise Reporting Installation Guide 5

6 Reporting modules and components Chapter 1: Preinstallation Information Components of Websense Enterprise Reporting may be installed on one or more machines, depending on the network and the database engine used. Websense Enterprise Reporting components require that a database engine, either Microsoft SQL Server 2000/2005 or MSDE 2000, and is installed and running during the Websense Enterprise Reporting installation. Link to a free copy of MSDE provided during the Reporting installation. All the Reporting modules and their components rely on Websense Enterprise. Therefore, they are always installed after Websense Enterprise. Reporting components follow. Underlined components must be installed to use any other Reporting component or module. Log Server: Required for any Websense Enterprise Reporting component to work. Log Server creates the Log Database to which it sends internet activity, categories, protocols, and Risk Class names. Environments with a high volume of internet activity should consider placing Log Server on a separate machine. Log Server processing can consume considerable system resources, and could slow performance of other programs. Log Database: Created and powered by Microsoft SQL Server or MSDE. The term Log Database encompasses the Catalog Database, which is created at installation and database partitions for reporting. Thus, the Log Database receives and stores internet activity data. Reporter: Client-based application that produces reports that can be generated automatically, and sent via or printed. Reporter can be installed on multiple machines, each connected to the same Log Database. This approach enables multiple managers, for example, to create reports from the same data and generate reports from different machines, at different times. Websense Enterprise Explorer with Database Administration: Webbased application that produces a variety of easy-to-understand summary and detail reports. Database Administration is located on the Reporting Tools Portal page and manages databases over time with scheduled rollover and automatic creation of database partitions. Default settings can be modified by the Administrator. Websense Enterprise Reporting Installation Guide 6

7 Chapter 1: Preinstallation Information Web server - either Apache or Microsoft IIS (Apache is included in the installation package). Web browser - Microsoft Internet Explorer v5.5 or later (not included in installation). Database Engine. Generally the database engine should run on a separate machine from other Reporting components. Websense recommends that SQL Server 2000/2005 run on its own machine. The installation program places the database on the database engine machine. In environments with a low volume of internet activity, MSDE can run on the same machine with other Reporting components. Policy Server. The Policy Server service must be running for the Log Server service to start. To maximize performance, do not install the Log Server or database engine on the Policy Server machine. IMPORTANT Install Log Server and the database before installing any other Reporting components, unless all components are being installed on one machine. Online Help Select the Help option within the program to display detailed information about using the product. IMPORTANT If Microsoft Internet Explorer is your browser, the default settings may block operation of the Help system. If a security alert appears, select Allow Blocked Content to display the Help. If corporate security standards permit, you can permanently disable the warning message in Internet Explorer. Go to Tools > Internet Options > Advanced tab > Security, and check Allow active content to run in files on My Computer. Websense Enterprise Reporting Installation Guide 7

8 Chapter 1: Preinstallation Information Technical Support Websense, Inc., is committed to customer satisfaction. Go to the Websense Technical Support website any time for the latest release information, a Knowledge Base, product documentation, or to create a support request. The response time during business hours is approximately 4 hours. Response to after-hours requests occurs the next business day. Telephone assistance is also available. For quick and efficient answers to telephone requests, Websense Technical support needs key information about your system. Please be ready with the following: Websense subscription key Access to Websense Manager Access to the machine running Filtering Service, the reporting components, and the database engine (MSDE or SQL) Permission to access the Websense Log Database Familiarity with your network s architecture, or access to a person who has this knowledge Specifications of the machines running Filtering Service and Websense Manager A list of other applications running on the Filtering Service machine For severe problems, additional information may be needed. Standard telephone assistance is available during normal business hours Monday through Friday at the following numbers: San Diego, California, USA: London, England: +44 (0) Customers in Japan should contact their distributor for the most rapid service. Websense Enterprise Reporting Installation Guide 8

9 Chapter 1: Preinstallation Information Installation Checklist This checklist is designed to help you before and during your Websense Enterprise Reporting installation. Print this checklist for reference as you prepare for and perform the Reporting installation, especially if you are deploying components to different machines. 1. Keep in mind If the Enterprise Reporting components are installed on Windows Vista and you want to connect to a Log Database through an ODBC connection to run reports, the domain controller must be on Windows 2000 or later. Real-Time Analyzer (RTA) lets you drill down into internet access reports and view internet usage trends. For system requirements, see the Websense Deployment Guide. For installation information, see the appropriate Websense Installation Guide for your system. The following services (components of Websense Enterprise) must be running during the Reporting installation. Filtering Service Policy Server User Service If you change default port numbers when installing Websense Enterprise, write them down. You may need the information when installing Reporting. If your web browser has strict settings for pop-up blocking, it may restrict or prevent the use of some Reporting features or components. If you are running a Windows 2003 operating system: You must apply the Microsoft Windows 2003 Service Pack 1 (SP1) before downloading the Websense Language Pack during your Websense non-english installation. Be sure a printer driver (appropriate for the operating system) is installed on the machine running Websense Enterprise Reporter before attempting to generate Reporter reports. Websense Enterprise Reporting Installation Guide 9

10 Chapter 1: Preinstallation Information If you install Log Server on the same machine as Microsoft SQL Server and later upgrade SQL Server, the changes may prevent Log Server from starting. Run the Reporting installation again and choose the Repair option to restore normal Log Server operation. 2. Understand how to use Websense Setup Websense products are installed from Websense Setup, which is downloaded from the Websense website at (located on the Downloads page), or launched from the Websense Installation CD. You will run Setup to install any of these products or their components. Each of these products includes several modules, which also contain separate components. Setup can be used to install modules or single components on separate machines. This checklist is meant to be used at each appropriate machine for installation. IMPORTANT For performance reasons: Websense recommends that you do not install Websense Enterprise, Websense Enterprise Reporting, and Websense Enterprise Client Policy Manager on the same machine. 3. Determine how you want to deploy Reporting components The various components of Websense Enterprise Reporting may be installed on the same or different machines, depending on the network and the Database Engine used. Install Log Server, the database, and the Database Engine before the other Reporting components. All components can be installed at the same time. Note Log Server, the database, and the Database Engine are required to use any other Reporting module or component. Websense Enterprise Reporting Installation Guide 10

11 Chapter 1: Preinstallation Information For information on how to best deploy the products, modules, and components, see the Websense Deployment Guide. The link at the top of Setup Manager opens the most current version of the Websense Deployment Guide. 4. Verify that you have the appropriate minimum software and hardware Websense Enterprise components can be installed together on one machine, or distributed across multiple machines, depending on the operating systems and the size of the network. Websense Enterprise v6.3.x: All the Reporting modules and their components rely on Websense Enterprise, so install Websense Enterprise before Websense Enterprise Reporting. For complete and detailed information on general deployment recommendations, see the Websense Deployment Guide. Database Engine: Reporter: Log Server: Explorer with Database Administration: 5. Select the appropriate components for this machine Based on how you have chosen to deploy Websense Enterprise Reporting components, select or de-select each component by checking or unchecking the check box associated with each component listed. Websense Enterprise Reporter: Client-based application that communicates with Websense Enterprise and manages information about internet activity. Log Server: Required to receive, store, and report on internet activity. Database: Required storage for data about internet activity. Websense Enterprise Reporting Installation Guide 11

12 Chapter 1: Preinstallation Information Database Engine: Obtain and install either Microsoft SQL Server or MSDE. If you use Microsoft SQL Server 2000 or 2005, you must perform the installation steps in a specific sequence to avoid installation problems. See Installing with SQL Server 2000/2005, page 28. Microsoft SQL Database Engine (MSDE) is not installed with Reporting. To use MSDE, you can obtain English or foreign language versions from Websense. Links appear during the installation procedure if Setup detects no supported database engine. When you download MSDE from these links, the Reporting installation procedure stops. You must set up MSDE first, and then rerun the Reporting setup.exe installation program. Websense Enterprise Explorer with Database Administration: Webbased application that produces a variety of easy-to-use summary and flexible detail reports that can be designed and run by business managers and human resource professionals. As part of the Explorer Web-based application, Database Administration assists in managing the size of the database partitions, rolling over databases, and creating new ones. Web server: Either Apache or Microsoft IIS (Apache is included in the installation package). Web browser: Microsoft Internet Explorer v5.5 or later (not included in the installation). 6. Verify and record the Policy Server location Verify and record the IP address or machine name where Policy Server is installed during the Websense Enterprise installation. 7. If Microsoft IIS is used Provide the port number Policy Server uses to communicate. The default port number is Select a different port number for Policy Server if the default port is not available Choose a web server (when installing Explorer). Websense Enterprise Reporting Installation Guide 12

13 Chapter 1: Preinstallation Information Microsoft IIS: If a website has been created for another Websense product, the installer will use that website. If not, you will be required to set up a new website or use an existing website. In this case, use the Microsoft Windows Internet Services Manager. 8. Provide database engine location and decide how to connect to the database Record the IP address (preferred) or name of machine running the database engine (Microsoft SQL Server 2000/2005 or MSDE). When the database engine (Microsoft SQL Server 2000/2005 or MSDE) is located on a remote machine, the default location for installing the database file is C:\Program Files\Microsoft SQL Server\Mssql\Data, which works properly unless SQL Server 2000/ 2005 or MSDE was installed with an instance name. If this is the case, enter the name of an existing directory on the remote machine where the database should be installed. Make note if a Trusted Connection is being used. Note Websense, Inc., recommends avoiding Trusted Connections when connecting to an MSDE database. Enter the user name and password that will be used to access the database. For MSDE, use the sa user name (default name for the system administrator). Provide membership for the public and SQLAgentUserRole roles in the Microsoft SQL Server 2005 msdb database. See Configuring Microsoft SQL Server 2005 user roles, page 29. Websense Enterprise Reporting Installation Guide 13

14 Chapter 1: Preinstallation Information 9. Determine where to install the database Log Server and the database engine on the same machine: Click Browse to select a folder on the local machine for installing the database. Log Server and the database engine on different machines: Enter the path for installing the database. This must be a local drive on the SQL Server machine, and the directory must already exist on that machine. IMPORTANT You need to create a path to the database before installing Reporting. A problem can occur during installation if the path is nonexistent, and Log Server and SQL Server are on different machines. Make sure there is enough free disk space (at least 3 GB for SQL Server users and 500 MB for MSDE users) on the specified drive for each database. Also refer to your Microsoft documentation. Keep in mind that depending on the number of users in your enterprise and your network setup, your database may grow rapidly. For recommendations, see the Websense Deployment Guide. 10. Choose whether to minimize your database size Reporter can report a separate internet access for each web page generated by a URL request (visit) or for each separate file that a page request generates (hits). Accept the default to log web page by Visits to report by Visits for a smaller database and faster reporting. Choose to report by Hits to record an entry for every file requested, including graphic images and advertisements. Choose to Consolidate Log Records to minimize your database size by combining multiple visits by the same user to the same internet domain. Websense Enterprise Reporting Installation Guide 14

15 Chapter 1: Preinstallation Information 11. Determine where to locate the installation files Accept the default location C:\Program Files\Websense Choose another location 12. Choose whether to enable WebCatcher Yes. You can help improve the quality of the Websense Master Database by enabling WebCatcher to send unrecognized and security URLs to Websense, Inc., for analysis and categorization. No user-identifying information is ever sent to Websense. You must have Internet Explorer v5.5 or later installed to enable WebCatcher to use HTTP post to send files to Websense. Save a copy of the data that is sent to Websense. Maximum upload file size (KB -- default size 4096 KB) Minimum daily start time. No. Do not send unrecognized URLs to Websense. This disables WebCatcher. 13. When upgrading Websense recommends that you upgrade all the Reporting modules and components at the same time. When Websense Enterprise Reporting has been previously installed with a Language Pack, upgrading to v6.3.x resets the language to English. The v6.3.x Language Pack must be downloaded during your Websense non-english installation. The Windows Event Viewer must not be running during an upgrade or when repairing an existing installation. If the Event Viewer is open during an upgrade, the installer will crash. If you attempt to repair your Websense system when the Event Viewer is open, the repair will fail, even though the installer appears to finish normally. Websense Enterprise Reporting Installation Guide 15

16 Chapter 1: Preinstallation Information 14. When migrating a database The Migrate Utility installs with the Log Server and is used to migrate databases for Reporter from v5.5.x to v6.2. Once the information has been migrated to v6.2, Reporter v6.3.x can use it to generate reports. Explorer users can connect to the old database schema to run reports on older data in the v6.1.x and v6.2 databases. IMPORTANT Do not log to a migrated database. You should use migrated databases only for reporting. Websense Enterprise Reporting Installation Guide 16

17 CHAPTER 2 System Requirements To provide you with the most accurate information possible, Websense provides hardware recommendations based on the potential number of seats within a corporation. Current information for software requirements and hardware recommendations is available in the Websense Deployment Guide. All Websense product documents are available at Go to Support and Knowledge Base, and then navigate to Product Documentation. The following are component-specific requirements before you install Websense Enterprise Reporting components. Websense Enterprise Explorer Your company may encrypt web traffic containing sensitive information (HTTPS) or not. Explorer runs over HTTP or HTTPS, if your web server supports this type of traffic. The web server portion can be installed on any machine that can connect to the database. Windows authentication is supported when the web server is Microsoft IIS. You must use Internet Explorer v5.5 or later to run Websense Enterprise Explorer. Websense Enterprise Reporter You must have a print driver installed and selected as a default, appropriate to the operating system you use. For information on using a database engine for Reporting, see the following: Selecting a database engine, page 18 Database engine system requirements, page 18 SQL Server/MSDE installation error messages, page 19 Installing with MSDE 2000, page 27 Installing with SQL Server 2000/2005, page 28 Websense Enterprise Reporting Installation Guide 17

18 Chapter 2: System Requirements Selecting a database engine The descriptions below provide an overview of Microsoft SQL Server Desktop Engine 2000 (MSDE) and Microsoft SQL Server 2000/2005 (SQL Server), either of which can be used by Websense Reporting. IMPORTANT The database engine must be installed before you install Websense Reporting components. MSDE: the database size will not go beyond approximately 1.5 GB. Upon reaching this maximum size, the database is automatically rolled over, and a new database partition is created. Reports may be generated from any database partition or partitions. MSDE works best for smaller networks and organizations of less than 500 users that either have a low volume of internet access or that plan to generate reports and then archive the database on a weekly or monthly basis. MSDE should be installed via the link provided during the Reporting installation program. SQL Server 2000/2005: Works best for larger networks and those organizations with a high volume of internet usage. Also, SQL Server performs better than the MSDE for reporting over long periods of time, such as several weeks or months. If a copy of SQL Server already exists on your network, Websense recommends using this solution; otherwise SQL Server must be purchased separately. If you use SQL Server 2000, be aware that you must install using the Connectivity Only option on each machine running Reporting components. Database engine system requirements The system requirements vary according to the database engine. Websense Reporting works with either MSDE 2000 or SQL Server 2000/2005. Websense Enterprise Reporting Installation Guide 18

19 Chapter 2: System Requirements Websense recommends using MSDE in organizations with less internet activity, and SQL Server in organizations with higher volume. Operating System MSDE v2000 (can be downloaded during installation) Microsoft Windows 2000, Professional, Server, or Advanced Server (Service Pack 1) Microsoft Windows XP Professional Microsoft Windows 2003 Microsoft SQL Server v2000 (SP 4 or higher) and SQL Server v2005 (SP1) Microsoft Windows 2000, Server, or Advanced Server (Service Pack 1) Windows 2003 Enterprise and Standard editions RAM Processor For details, see the Websense Deployment Guide. The document is available at Go to Support and Knowledge Base, and then navigate to Product Documentation. Web browser Disk space Microsoft Internet Explorer v5.5 or later 3 GB recommended (per database) Microsoft Internet Explorer v5.5 or later Refer to Microsoft documentation SQL Server/MSDE installation error messages When installing Reporting tools, a pre-installation script runs to check your SQL Server configuration. The script runs before installation files are transferred. If any configuration issue is found, the installer presents an error message that describes the problem. You can avoid having to stop and restart your Reporting installation if you configure SQL Server before you install the Reporting tools. Websense Enterprise Reporting Installation Guide 19

20 Chapter 2: System Requirements The following topics describe the issues that may cause the Reporting installation to fail, and provide information for correcting the possible problems in advance. Database version error messages Websense Reporting tools must have access to MSDE 2000 or SQL Server 2000/2005. If you have an older version of MSDE or SQL Server, upgrade before you install Websense Reporting tools. MSDE is free, and access to a downloadable version is available via a link in the Websense installation wizard, if a database engine is not found. SQL Server is available from Microsoft. Check the Microsoft website for purchase information. For installation and upgrade details, see the Microsoft documentation. If you try to install Websense with an MSDE or SQL Server version that is not supported, an error message appears. The installer will terminate and will not access or install Reporting files and components. Collation and case-sensitivity error messages Websense Reporting tools use case-insensitive collation functions for database searches to provide highly accurate reports. If your SQL Server 2000/2005 instance uses case-sensitive collation, you cannot install Websense Reporting files and components. This occurs most often if one or more other applications are using that instance of SQL Server. To address the issue, install another SQL Server instance set to use the default case-insensitive settings. During installation, the Collation Settings dialog box provides options from which you are able to select the correct collation setting. You can check the case setting of SQL Server via SQL Enterprise Manager, although you cannot change the setting. 1. Make sure you have administrator access to SQL Server. 2. From the Windows Start menu, select: Programs > Microsoft SQL Server > Enterprise Manager. SQL Enterprise Manager opens. 3. Go to the navigation pane and expand the following trees, in the order listed. Websense Enterprise Reporting Installation Guide 20

21 Chapter 2: System Requirements a. Microsoft SQL Servers b. SQL Server Group 4. Right-click the server icon for the machine where the SQL instance you want to use is installed, and then select Properties from the drop-down menu. 5. Select the General tab and look for the text Server collation. An example appears next. SQL_LATIN1_General_CP1_CS_AS In this string, the text in highlighted position indicates case sensitivity. There are two possible entries. CS indicates the collation setting is case-sensitive. CI indicates the collation setting is case-insensitive. 6. Click OK to close the Properties dialog box. Host machine and MSDE/SQL Server names error messages If the name of the host machine changed after MSDE/SQL Server was installed, the host and MSDE/SQL Server names will not match. If the machine and the MSDE/SQL Server names do not match, an error message appears, and Websense reporting components and files are not installed. You must follow the next procedure to change the MSDE/SQL Server name without corrupting the database. For both database engines, use the osql utility to run the necessary commands. 1. Go to the machine where the MSDE/SQL Server instance runs that you want to connect to for Websense Reporting tools. 2. Check the machine name. Right-click My Computer on the desktop, and then select Properties from the drop-down menu. a. When the Properties dialog box opens, click the Network Identification or Computer Name tab. b. Check Full Computer Name, and write the name down. You will need this name later. c. Click OK to close the Properties dialog box. 3. From the Windows Start menu, select: Control Panel > Administrative Tools > Services to verify that the MSDE/SQL Server instance is running. Websense Enterprise Reporting Installation Guide 21

22 Chapter 2: System Requirements 4. From the Windows Start menu, select: Programs > Accessories > Command Prompt. A Command Prompt window opens. 5. To connect to the named instance of MSDE/SQL Server using Windows Authentication, type the following command, and then press <Enter>. osql -E -S servername\instancename In the above command: for servername, substitute the actual name of the MSDE/SQL Server. for instancename, substitute the actual name of the MSDE/SQL Server instance. 6. Verify the entry in the Command Prompt window is 1>. This shows you are connected to the MSDE/SQL server. 7. View the currently-installed server name by entering the next commands. Press <Enter> at the end of each command. 1> EXEC sp_helpserver 2> GO 8. Enter the next commands to remove the named instance of MSDE/SQL Server. Press <Enter> at the end of each command. 1> sp_dropserver N'old_SQL_name' 2> GO In the above command, replace old_sql_name with the existing MSDE/ SQL Server name. 9. Check the results. An entry of 0 in the Command Prompt window indicates success. 10. Enter the next commands to add a new named instance of the MSDE/SQL Server. Press <Enter> at the end of each command. 1> sp_addserver N'new_SQL_name' 2> GO In the above command, replace new_sql_name with the name of the host machine, which you discovered in step 2 of this procedure. 11. Check the results. An entry of 0 in the Command Prompt window indicates success. 12. Enter the next commands to verify the new named instance of the MSDE. Press <Enter> at the end of each command. Websense Enterprise Reporting Installation Guide 22

23 Chapter 2: System Requirements 1> EXEC sp_helpserver 2> GO 13. Type EXIT to close the osql utility. 14. If you use SQL Server as your database engine, you can also use SQL Enterprise Manager to verify that the name change has been accepted. 15. Restart the machine where MSDE/SQL Server runs. 16. Run the Websense Reporting tool installer again. The next Microsoft topics can provide additional information. Transact-SQL Reference Command Prompt Utilities Microsoft documents are available at Database creation error messages To install Websense Reporting files and components, you must have access rights that allow you to create databases. This is associated with a fixed server role. You need to create the DBCreator role to gain access to the create databases rights. See the following: Using SQL Enterprise Manager to set database creation rights, page 23 Using osql utility to set database creation rights, page 24 Using SQL Enterprise Manager to set database creation rights 1. Make sure you have administrator access to SQL Server. 2. From the Windows Start menu, select: Programs > Microsoft SQL Server > Enterprise Manager. SQL Enterprise Manager opens. 3. Go to the navigation pane and expand the following trees, in the order listed. a. Microsoft SQL Servers b. SQL Server Group c. The machine entry that identifies the machine where SQL Server runs. d. Security Websense Enterprise Reporting Installation Guide 23

24 Chapter 2: System Requirements 4. Under Security, locate and then double-click Server Roles. The Server Roles pane opens with the full names of the available server roles. 5. Right-click Database Creators, and then select Properties from the drop-down menu. The Servers Role Properties- dbcreator dialog box opens. 6. Click Add. The Add Members dialog box opens, and shows all existing logons for SQL Server. 7. Highlight the logon to which you are adding database creation rights, and then click OK. The Add Members dialog box closes. 8. In the Servers Role Properties- dbcreator dialog box, verify that you have selected the correct logon, and then click OK. 9. Select Console > Exit to close SQL Enterprise Manager. Using osql utility to set database creation rights If you use MSDE 2000 as your database engine, complete the next procedure to add the dbcreator role using osql, the MSDE user interface. 1. Go to the machine where the MSDE 2000 instance runs where you want to connect to the Websense Reporting tools. 2. From the Windows Start menu, select: Control Panel > Administrative Tools > Services to verify that the MSDE 2000 instance is running. 3. From the Windows Start menu, select: Programs > Accessories > Command Prompt. A Command Prompt window opens. 4. To connect to the named instance of MSDE 2000 using Windows Authentication, type the following command, and then press <Enter>. osql -E -S servername\instancename In the above command: for servername, substitute the actual name of the MSDE Server. for instancename, substitute the actual name of the MSDE instance. 5. Verify the entry in the Command Prompt window is 1>. This shows you are connected to the MSDE server. 6. Enter the next command to grant rights for database creation, and then press <Enter>. 1> EXEC sp_addsrvrolemember N'user_logon', N'dbcreator' Websense Enterprise Reporting Installation Guide 24

25 Chapter 2: System Requirements 2> GO In the above command, replace user_logon with the SQL or Windows user logon to whom you are assigning database creation rights. 7. Check the results. An entry of 0 in the Command Prompt window indicates success. 8. Type EXIT to close the osql utility. 9. Run the Websense Reporting tool installer again. Table creation error messages You must have SQL Server logon rights role that allows you to create tables. If this role is not already set, you need to set the table creation rights. See the following: Using SQL Enterprise Manager to set table creation rights, page 25 Using osql utility to set table creation rights, page 26 Using SQL Enterprise Manager to set table creation rights 1. Make sure you have administrator access to SQL Server. 2. From the Windows Start menu, select: Programs > Microsoft SQL Server > Enterprise Manager. SQL Enterprise Manager opens. 3. Go to the navigation pane and expand the following trees, in the order listed. a. Microsoft SQL Servers b. SQL Server Group c. The machine entry that identifies the machine where SQL Server runs. d. Databases 4. Under Databases, locate the Websense database name, and then rightclick. 5. From the drop-down menu, select Properties. The Properties dialog box for that database opens. 6. Select the Permissions tab. When the pane comes to the top, it contains a list of the user logons to set permissions. 7. Locate the logon entry for the added table creation rights. Websense Enterprise Reporting Installation Guide 25

26 Chapter 2: System Requirements 8. In the Create Tables column, mark the checkbox that appears for the logon role you are modifying. 9. Click OK to close the Properties dialog box. 10. Select Console > Exit to close SQL Enterprise Manager. Using osql utility to set table creation rights If you use MSDE as your database engine, complete the next procedure to set table creation rights using osql, the MSDE user interface. 1. Go to the machine where the MSDE 2000 instance runs that you want to connect to for Websense reporting tools. 2. From the Windows Start menu, select: Control Panel > Administrative Tools > Services to verify that the MSDE 2000 instance is running. 3. From the Windows Start menu, select: Programs > Accessories > Command Prompt. A Command Prompt window opens. 4. To connect to the named instance of MSDE 2000 using Windows Authentication, type the following command, and then press <Enter>. osql -E -S servername\instancename In the above command: for servername, substitute the actual name of the MSDE server. for instancename, substitute the actual name of the MSDE instance. 5. Verify the prompt in the Command Prompt window is 1>. This shows you are now connected to the MSDE server. 6. Enter the next commands to grant rights for table creation. At the end of each line, press <Enter>. GRANT CREATE TABLE TO user In the above command, replace user with the SQL or Windows user logon to whom you are assigning table creation rights. 7. Check the results. An entry of 0 in the Command Prompt window indicates success. 8. Type EXIT, and then press <Enter> to close the osql utility. 9. Run the Websense reporting tool installer again. Websense Enterprise Reporting Installation Guide 26

27 Chapter 2: System Requirements Installing with MSDE 2000 Note If replacing a previous installation of MSDE and upgrading from an English to a non-english language version of MSDE 2000, you need to uninstall the English version of MSDE before installing the non-english version of MSDE. MSDE should be installed from the link available during the Reporting installation. The program is free. The standard MSDE installation requires a special setup to work with Websense Reporting if you are going to use a remote installation of the database engine. This setup is automatically downloaded from this link. 1. Log on as a user with local administrator privileges to the database machine. 2. Close any open applications, including the Windows Control Panel. 3. Download Websense Setup from the Websense website or launch it from the Websense Installation CD. Unzip the installation files. 4. Websense Setup launches automatically. Follow the instructions on each screen until you come to the options about installing Websense Enterprise or Client Policy Manager. 5. Click Websense Enterprise and Next. 6. Select Websense Enterprise Reporting, and then click Next. 7. Follow the instructions on each screen until you come to an option to download a free copy of MSDE. 8. Select the appropriate language version, then follow the instructions. 9. Restart your machine after MSDE has finished the installation. IMPORTANT You must restart the machine before installing any other Reporting components. Websense Enterprise Reporting Installation Guide 27

28 Chapter 2: System Requirements 10. If the installation was successful, MSDE becomes active. MSDE must be running when you install the Log Server. Installing with SQL Server 2000/2005 Microsoft SQL Server must be purchased separately. If it has not been installed in your network, see Microsoft documentation for system requirements and installation instructions. Generally, follow these steps. 1. Install SQL Server 2000/2005 according to Microsoft instructions, if it has not already been installed. 2. Make sure SQL Server is running. 3. Make sure SQL Server Agent is running. 4. Obtain the SQL Server logon ID and password for a SQL Server Administrator, or for an account that has rights to create, modify and delete databases and tables. You need this logon ID and password when you install Reporting components. 5. Restart the SQL Server machine after installation, and then install Log Server on an appropriate machine, as described in the next section. Note You must restart the machine after installing Microsoft SQL Server 2000/2005 and before installing Log Server. 6. Make sure the Log Server machine and each Reporting machine can recognize and communicate with SQL Server 2000/2005. This can be done by running the SQL Server 2000/2005 installation program on each appropriate machine and selecting Connectivity Only when asked what components to install. 7. You must restart the machine after installing the connectivity option. See Microsoft SQL Server documentation for details. Websense Enterprise Reporting Installation Guide 28

29 Configuring Microsoft SQL Server 2005 user roles Chapter 2: System Requirements Microsoft SQL Server 2005 has defined new SQL Agent roles that govern accessibility of the job framework. Note The SQL user account must also be a member of the DBCreator fixed server role. Do the following to create the DBCreator role and provide membership for the public and SQLAgentUserRole roles in the msdb database. 1. Go to the Windows Start menu and select Programs > Microsoft SQL Server 2005 > Microsoft SQL Server Management Studio. 2. Select the Object Explorer tree. 3. Select Security > Logins. 4. Select the login account to be used during the installation. 5. Right-click the login account and select Properties for this user. 6. Select User Mapping and do the following: a. Select msdb in database mapping. b. Grant membership to the public role. c. Grant membership to the SQLAgentUserRole role. d. Click OK to save. 7. Select Server Roles, and then select DBCreator. The DBCreator role is created. 8. Click OK to save. You should have the necessary permissions to successfully install the Websense Enterprise Reporting tools. Websense Enterprise Reporting Installation Guide 29

30 CHAPTER 3 Selecting the Web Server and Setting Up Users Websense Enterprise Explorer is a web-based application. You must use either Microsoft IIS or Apache as the web server. Your installation choices and security procedures vary, based on whether your web server is Microsoft IIS or Apache. For technical support on the installation or operation of either of these web servers, contact Microsoft or Apache directly. If both web servers are installed on the machine where you are installing Reporting, choose which web server you want to use. This chapter contains the following topics. Explorer with Microsoft IIS Web Server, page 31 Using Reporter, page 32 Identifying users for Reporting tools and utilities, page 32 Accessing Reporting tools, page 32 Websense Enterprise Reporting Installation Guide 30

31 Chapter 3: Selecting the Web Server and Setting Up Users Explorer with Microsoft IIS Web Server If you are using IIS, you need to know the name of the IIS website before you begin the installation. Enter the name of an existing website from IIS Manager in which the virtual directory is to be created. To create a new website or view existing websites, use the Windows Internet Services Manager. From the Windows Start menu, select Programs > Administrative Tools > Internet Services Manager. Explorer access requirements for the Temp directory Employees who have access to Explorer reports also need to have modify access rights to the system Temp directory. For most servers, these rights are granted. For custom or secure server configurations, you may need to modify access rights before employees can access Explorer reports. The system Temp directory is defined by the configurable environment variable %temp%, identified by default as C:\Windows\Temp. Verifying the Temp directory location Follow the next procedure to verify the location of the Temp directory. 1. Log on to the machine where Websense Enterprise Explorer is installed. 2. Locate and right-click My Computer. 3. Select Properties from the drop-down menu. 4. Click the Advanced tab. 5. Check the System variables list for the Temp entry. Usually, the value is C:\Windows\Temp. Verifying Temp directory access Once you verify the location of the system Temp directory, you need to verify and possibly modify access to the directory at the machine where Explorer is installed. 1. Locate the Temp directory. By default, the directory is: C:\Windows\Temp. 2. Right-click the Temp folder, and then select Properties. Websense Enterprise Reporting Installation Guide 31

32 Chapter 3: Selecting the Web Server and Setting Up Users 3. Verify that all users and Groups that should have access to Explorer reports are listed. 4. Click Modify for each associated user or group that will be allowed to access Explorer reports. Other boxes are automatically checked, based on your selection. 5. When you are done selecting all users or groups, click OK. Using Reporter To generate reports in Reporter, you must log on as a local administrator with privileges to the database machine. Identifying users for Reporting tools and utilities As a Reporting administrator, default access to Websense Reporting tools uses the same user ID and password used to log on to Websense Manager. The default user account to log on to the Websense Reporting Tools Portal is WebsenseAdministrator. To identify other users for all Reporting tools, you must be in Websense Manager, and then select the Report Administrators option in the navigation pane. For complete configuration details, see the Websense Administrator s Guide. Accessing Reporting tools To access Websense Reporter: From the Windows Start menu, select Program Files > Websense > Websense Reporter. To access Log Server Configuration: From the Windows Start menu, select Program Files > Websense > Utilities > LogServer Setup. To access the Migrate Utility: From the Windows Start menu, select Program Files > Websense > Utilities > Migrate Utility. To access Real-Time Analyzer, Websense Enterprise Explorer, or Database Administration: From the Windows Start menu, select Websense Enterprise Reporting Installation Guide 32

33 Chapter 3: Selecting the Web Server and Setting Up Users Program Files > Websense > Web Reporting Tools. The Reporting Tool Portal opens. Websense Enterprise Reporting Installation Guide 33

34 CHAPTER 4 Running the Installer This chapter contains the following topics. Downloading and unzipping the installation files, page 34 How to use Websense Setup, page 34 Installing the Websense Language Pack, page 35 Installation concerns, page 38 Connecting to a database, page 40 Downloading and unzipping the installation files Websense Enterprise installation files are downloaded from the Websense website at located on the Downloads page, or launched from the Websense Installation CD. Once you access the installation files: 1. Accept the default location to unzip the installation files, or browse to a different location. 2. Click Extract to unzip the installation files. All the installation files are unzipped and Websense Setup opens. How to use Websense Setup Websense Setup installs: Websense Enterprise Websense Enterprise Reporting Websense Enterprise Reporting Installation Guide 34