Monitor communication with the hybrid service

You can view the status of the hybrid service on the Web > Status > Dashboard > Hybrid Service page in the Forcepoint Security Manager. This page displays when data was most recently sent to or received from the hybrid service. If an attempt to send or receive data failed, find out when the failure occurred, and which components were involved.

Under Sync Service Communication Results, the page lists the date and time that Sync Service last:

  • Connected or attempted to connect to the hybrid service for any reason
  • Sent or attempted to send directory information to the hybrid service
  • Retrieved or attempted to retrieve log (reporting) data from the hybrid service
  • Sent or attempted to send log data to Log Server
  • Sent or attempted to send account information to the hybrid service
  • Sent or attempted to send policy information to the hybrid service

If you have not yet set up the connection between on-premises and hybrid components, a message explains that “No communication has occurred.”

Under Last Directory Agent Sync Results, the page lists:

  • The date and time that Directory Agent last sent data to the hybrid service
  • The total number of users and groups processed by Directory Agent
  • The number of users and groups that were updated in the hybrid service
  • The number of groups filtered out because they contained invalid values
  • The number of users filtered out because they included invalid email addresses
  • The number of new users and groups synchronized with the hybrid service
  • The number of obsolete users and groups removed from the hybrid service

This page also allows you to access authentication method and user agent reports from the hybrid service (see View hybrid service authentication reports and View the hybrid service User Agent Volume report), and displays the type of PAC file you are using:

  • The default PAC file from the hybrid service
  • A customized PAC file uploaded from the pac directory (see What is the hybrid PAC file?)
  • The default PAC file with an uploaded customized fragment

If you are using a custom file or fragment, the page shows how long the file or fragment has been in use.

If a Secondary date stamp is shown for the PAC file, this means that Sync Service has uploaded both a custom PAC file and a custom fragment from the pac directory.

The recommended state for custom PAC files is to set up a custom file or a custom fragment, not both. To rectify this, go to the pac directory (by default, \Program Files \Websense\Web Security\bin\data\pac on Windows, or /opt/websense/bin/data/pac on Linux) and delete either websense.pac or customfinal.pac.

If you are using a customized block page logo, this page displays the date and time the logo file was uploaded to the hybrid service.