Websense+span

[boymarty24]

Hello,

I have downloaded the trial for websense to evaluate if the product should be bought in. I have one, perhaps stupid question about span. THe network agent is on the same machine as websense enterprise.

Anyone with websense and cisco that has any good ideas how this should be configured. Is it possible to have the agent and websense on the same machine and have it plugged into a span port?

Thx in advance

 

[geoffo0]

Hi Boymarty .
What is it your trying to do?
We have the enterprise version of websense that is installed on on a proxy server(we have a couple as we run curriculuma and a large corporate network)
We use a Cisco 525 pix (failover pair) that is configured to send all internet traffic via the websense servers (except in specific cases where you can use an exemption)

We have set up span to capture all our vlan traffic and send this traffic via a Cisco Intrusion detector sensor.

 

[baddos]

If you are talking about their network monitor agent, then you'll need to add another NIC to the websense server and unassign any IP, etc to it. Then you setup your switch to create a SPAN port on which the newly installed NIC is plugged in to.

 

[boymarty24]

thx baddos,

I found the answer a couple of days ago. The solution was the same that you recommended.