Websense Content Gateway

Websense Content Gateway

Applies to

Web Security Gateway v7.6

Web Security Gateway Anywhere v7.6

In this topic

Overview

Deployment

Installation

Initial configuration

Online Help

Overview

Websense Content Gateway (Content Gateway) is a Linux-based, high-performance Web proxy and cache that provides real-time content scanning and Web site classification to protect network computers from malicious Web content while controlling employee access to dynamic, user-generated Web 2.0 content. Web content has evolved from a static information source to a sophisticated platform for 2-way communications, which can be a valuable productivity tool when adequately secured.

Content Gateway offers:

Automatic categorization of dynamic Web 2.0 sites

Automatic categorization of new, unclassified sites

HTTPS content inspection

Enterprise proxy caching capabilities

In a Websense-appliance-based deployment, Content Gateway is already installed on any Web-security-mode appliance.

In a software-based deployment, Content Gateway is a required part of Websense Web Security Gateway and Web Security Gateway Anywhere deployments. Content Gateway must be installed on a Linux machine. Typically, the machine is dedicated to running Content Gateway.

Content Gateway can also provide Web caching, improving bandwidth usage and network performance by storing requested Web pages and, while a stored page is considered fresh, serving that Web page to the requesting client.

In addition, Content Gateway can scan for content categorization. This feature examines the content on Web pages that are not included in the Websense Master Database and on pages that Websense has determined to have rapidly changing content. After this examination, Content Gateway returns a recommended category to Websense filtering software, which then permits or blocks the Web page depending on the policy in effect.

Websense Web Security Gateway and Web Security Gateway Anywhere subscribers get the following features, in addition to the standard Websense filtering and proxy features:

Security scanning, which inspects incoming Web pages to immediately block malicious code, such as phishing, malware, and viruses.

Advanced file scanning, which offers both traditional antivirus scanning and advanced detection techniques for discovering and blocking infected and malicious files users are attempting to download.

Content stripping, which removes active content (code written in selected scripting languages) from incoming Web pages.

See the TRITON - Web Security Help for information on the scanning options.

When installed as part of Websense Web Security Gateway Anywhere, Content Gateway also works with Websense Data Security Management Server to prevent data loss over Web channels. For more information, see Web Security Gateway Anywhere (software-based).

Content Gateway can behave as an explicit or transparent proxy.

In an explicit proxy deployment, client browsers must be configured to point to Content Gateway.

In a transparent proxy deployment, client requests are intercepted and redirected to Content Gateway by an external network device (required).

If you enable SSL Manager, in addition to filtering HTTPS URLs, the content on those pages is decrypted, examined for security issues, and, if appropriate, re-encrypted and forwarded to the destination.

When you run Content Gateway with Websense Data Security, which inspects HTTPS and FTP traffic, you must enable the SSL Manager feature. See the Content Gateway Manager Help for information on SSL Manager.

Deployment

Proxy deployment options

User authentication

HTTPS content inspection

Handling special cases

Explicit proxy deployment

Transparent proxy deployment

Chaining Content Gateway with other Proxies

Installation

These installation instructions are for installing Content Gateway software on a server. In Websense-appliance-based deployment of Websense Web Security Gateway or Web Security Gateway Anywhere, Content Gateway is already installed on the appliance and these instructions do not apply.

Complete the following procedures.

1.	Installing Web Security components to work with Websense Content Gateway

2.	Preparing to install Websense Content Gateway

3.	Installing Websense Content Gateway

Initial configuration

Starting Content Gateway Manager

Entering a subscription key for Content Gateway

Enabling SSL Manager in Content Gateway

Enabling WCCP for Content Gateway

Online Help

Select the Help option in Websense Content Gateway Manager to display detailed information about using the product.

Important  Default Microsoft Internet Explorer settings may block operation of the Help. If a security alert appears, select Allow Blocked Content to display Help. If your organization's security standards permit, you can permanently disable the warning message on the Advanced tab of the Tools > Internet Options interface. (Check Allow active content to run in files on My Computer under Security options.)

Websense Content Gateway