This
document has a very good description of the options and about the
Firewall-1/Websense integration, in short:
No
Caching.- Default, all the entries logged for reports, excellent blocking, very,
very slow.
UFP
Server.- Decent performance, very good blocking, doesn't log all
the access
VPN&FW-1 (One request).- Excellent performace, poor blocking, doesn't
log all access
VPN&FW-1(Two requests) .- performance between UFP Server and One Request, improved blocking, doesn't log all access
VPN&FW-1(Two requests) .- performance between UFP Server and One Request, improved blocking, doesn't log all access
Also
you have to permit some categories (like MP3) for any of the cache options
to work and you also should have only one policy defined.
A
detail I found that is not stated in the documentation is that you should have
the parameter cache_on=TRUE on the websense.ini file, and that the cache option
can only be managed from the local FW1 GUI (it doesn't show at all on the GUI
clients)
-----Original Message-----I am in the process of setting up CP-FW1 SP4 and Websense 4.3 for UFP caching control. It gives me 4 options
From: Michael Alvarez [mailto:[EMAIL PROTECTED]]
Sent: Mi�rcoles, 06 de Febrero de 2002 01:35 p.m.
To: [EMAIL PROTECTED]
Subject: [FW-1] UFP CachingNo Caching
UFP Server
VPN&FW-1 (One request)
VPN&FW-1(Two requests)My question to those who has implemented this: which do I choose and under what circumstances? Can anyone illucidate on each option? I appreciate the help.
Mike
