I am hoping someone can give me a few tips regarding
Websense version 6.1 and Checkpoint NG Feature Pack HFA325
and Checkpoint NGx.
I am running Websense version 6.1 on Linux and I would like
to integrate the URL filtering function with Checkpoint NG
Feature Pack 3 with HFA325. My Enforcement module is
a Nokia IP380 running IPSO 3.7.1 build 20 and NG FP3 hfa 325.
The nokia is being managed by Provider-1 NG Feature Pack 3
with HFA325 as well.
I followed the documentation and was able to get Websense
to work with Checkpoint as OPSec application URL Filtering
Protocol (UFP). Everything is working fine. I have a policy
to block users from surfing porn or any unappropriate sites.
When I have Websense running, it is working great. I've also
configured Checkpoint to ignore UFP if the Websense is down or
out of service. If that is the case, then just allow everything,
even if users trying to access inappropriate sites, allow
EVERYTHING through.
The problem I am having is that if I shutdown the Websense server,
I have weird problems popping up. I can load some sites but not
others. Sites that have a lot of graphics, the browser just hang.
For example, I can go to http://www.google.com but I can not
go to http://www.microsoft.com. When I turn Websense server,
everything is working fine again.
Another problem is that if I replace the Nokia Enformcement Module
with a Checkpoint Secureplatform box (NG Feature Pack 3 with HFA325),
then I have absolutely no problem at all. I means that when I shut
down the websense box, everyone can surf everywhere. That is the
way I wanted. The minute I put the NOkia back, same problem.
With Checkpoint NGx R60, doesn't matter if Secureplatform or Nokia,
I always problem when Websense Server is turned off. The browser jut
hang.
Has anyone run into similar situation like this one? Please comments. TIA
cisco4ng
---------------------------------
Yahoo! Autos. Looking for a sweet ride? Get pricing, reviews, & more on new
and used cars.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
