Integrating Web Security with Other Products > Integrating Web Security with Squid Web Proxy Cache

Integrating Web Security with Squid Web Proxy Cache

Applies to

Web Filter v7.6

Web Security v7.6

In this topic

u

Overview

u	Single Squid Web Proxy Cache configuration

u	Array configuration

Overview

Websense filtering components can be installed on the same machine as Squid Web Proxy Cache, on a separate machine, or on multiple machines. Squid Web Proxy Cache machines may be deployed in an array to share the load in a larger network. A Websense Squid redirector plug-in must be installed on each machine running Squid Web Proxy Cache.

Single Squid Web Proxy Cache configuration

The following illustration shows the Websense filtering components, the Websense redirector plug-in, and Squid Web Proxy Cache running on the same machine. You can also install a Websense transparent identification agent on the same machine, or on a separate machine.

The diagram provides a general overview and best practice location for your integration product, but does not show all Websense components. Larger networks require Websense components to be distributed across several dedicated machines.

An alternative deployment places all Websense filtering components on a separate machine from Squid Web Proxy Cache. This configuration eases the load on the Squid Web Proxy Cache machine.

The Websense redirector plug-in must be installed on the Squid Web Proxy Cache machine to enable communication with Filtering Service.

The Filtering Service and Squid Web Proxy Cache machines must be able to communicate over the network

Array configuration

Websense software is compatible with most array configurations, including Cache Array Routing Protocol (CARP) arrays. If the Squid Web Proxy Cache machines in an array can run Websense software without a performance impact, install the main Websense filtering components on one of the array machines.

The following illustration shows the Websense filtering components running on a Squid Web Proxy Cache machine, with Websense reporting components on a separate machine.

The diagram provides a general overview and best practice location for your integration product, but does not show all Websense components. Larger networks require Websense components to be distributed across several dedicated machines.

If installing Websense filtering components on the Squid Web Proxy Cache machine is likely to have a performance impact, install Websense software on a separate machine outside the array, and then install the Websense redirector plug-in on each member of the array. See the following illustration.

When Websense software is installed in this configuration, all array members send Internet requests to Filtering Service outside the array.

Other configurations are possible. See your Squid Web Proxy Cache documentation for information about array configurations. See Squid Web Proxy Cache Integration Websense software configuration instructions.

The diagram provides a general overview and best practice location for your integration product, but does not show all Websense components. Larger networks require Websense components to be distributed across several dedicated machines. Also, the Web filtering components are shown above on a Windows machine. The TRITON Unified Security Center must run on Windows; the remaining components can be installed on Linux instead.

Integrating Web Security with Other Products > Integrating Web Security with Squid Web Proxy Cache