RE: [FW1] HTTP Security & Websense

Stephan Dubeau Wed, 16 Aug 2000 11:43:16 -0700

Chris F :
 
You have to implicitly allow FW-1 to connect to your UFP Server. I add that
same message the first install I made.
And for the IE problem...never add it. Every thing work perfectly here. All
log are showing OK.
 
My setup: FW-1 4.0 SP6 on Wint-NT WS 4 SP5; Websense 4.2.1 for FW-1 on
Win-NT Server 4 SP6a (Internal NET)
Rules SET:
 
source____________destination______________services_________________________
action
13.FW-1____________>
WebSense____________>FW1-UFP_______________________>Accept
14.Inter-NET________>(negate)Inter-NET_______>HTTP->block sites(with
Resource)___>REJECT
15.Inter-NET________>(negate)Inter-NET_______>Valid-Services(group)_________
____>Accept
 
And last, in Websense you have to specify range of IP address for NETWORK or
Workstation separately. These IP address are the same as my address range in
FW-1 group Inter-NET.
 
******************************************
* Follow your dream! Unless it's the one *
* where you're at work in your underwear *
* during a fire drill.                   *
******************************************
Dessinateur / Draftsman &
Windows NT Administrator
Stephan Dubeau
Dessin Structural B.D. inc.
B.D. Structural Design inc.
mailto:[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>  (Affaire/Business)
mailto:[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>
(Amusement/Pleasure)


-----Original Message-----
From: Ryan Wilson [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, August 16, 2000 13:17
To: '[EMAIL PROTECTED]'
Subject: [FW1] HTTP Security & Websense



Hi Chris / Gary... 

This may not be a "problem" with Websense. We run the same configuration. 
What Browser are you guys using?? My predecessor was having the same
problems using IE (no suprise). 
At any rate it appears disabling all http1.1 settings in IE Internet options
has done the trick here. So I'm not sure if this is a work-around for a
Websense problem, or an IE problem.

hope it helps. 

Ryan Wilson 




        Date: Wed, 16 Aug 2000 14:49:33 +0100 
        From: "Varnam, Gary" <[EMAIL PROTECTED]> 
        Subject: RE: [FW1] HTTP Security & Websense 

        Chris, 

        I am having the same problem as yourself Websense is on NT4 SP5, and

        firewall version 4.0 on NT4. 
        Support at websense blame the firewall for the problem and don't
accept the 
        fact that it worked okay when I was running version 3 of Websense. 

        If anybody else on the list is experiencing this or know someone who
is 
        please let me know and I will use it the beat websense tech support
with all 
        our configurations cannot be wrong! 

        Anybody with a solution is also invited to reply. 

        Gary Varnam 




        - -----Original Message----- 
        From: Chris F [ mailto:[EMAIL PROTECTED]
<mailto:[EMAIL PROTECTED]> ] 
        Sent: 14 August 2000 18:39 
        To: Firewall One List 
        Subject: [FW1] HTTP Security & Websense 



        Hi All, 

        FW1 4.1 SP2 on Solaris 2.6 
        Websense v4.2.0 on NT4.0 SP5 

        I'm having problems with FW1's HTTP security server 
        and Websense. Sometimes, all HTTP traffic 
        "disappears". 

        Let's say I'm trying to go to cnn.com My browser will 
        just sit try to load the page until the browser 
        finally times out. FW1 logs nothing! No errors. 
        Nothing! 

        If I disable all my websense rules, it works. If I 
        re-enable them, it works again -- as intended. 

        I have 3 Websense rules. I have to disable them all, 
        then re-enable them to "clear" this problem. Rebooting 
        my Websense server doesn't fix it, so it's mostly 
        likely the HTTP security server. 

        Anyone else have a similar problem? Any fix?? 

        Another problem is this error message: 
        "Failed to contact UFP: Unknown error" 

        Gee...unknow error -- that helps! :) 
        Any thoughts? 


*============================================================================================*
The information contained in this e-mail may contain confidential or privileged 
material and
is intended only for the person or entity to which it is addressed.  If you are not 
the 
intended recipient, the use, disclosure, copying or distribution of this information 
is 
prohibited and may be unlawful.  If you have received it in error, please notify us 
immediately by telephone ((1)450-641-1434).  Please also destroy and delete the 
message 
from your computer.  The opinions contained within this e-mail are not necessarily the 
opinions of B.D. Structural Design Inc.
*============================================================================================*

Title: [FW1] HTTP Security & Websense

Chris F :

You have to implicitly allow FW-1 to connect to your UFP Server. I add that same message the first install I made.

And for the IE problem...never add it. Every thing work perfectly here. All log are showing OK.

My setup: FW-1 4.0 SP6 on Wint-NT WS 4 SP5; Websense 4.2.1 for FW-1 on Win-NT Server 4 SP6a (Internal NET)

Rules SET:

source____________destination______________services_________________________action

13.FW-1____________> WebSense____________>FW1-UFP_______________________>Accept

14.Inter-NET________>(negate)Inter-NET_______>HTTP->block sites(with Resource)___>REJECT

15.Inter-NET________>(negate)Inter-NET_______>Valid-Services(group)_____________>Accept

And last, in Websense you have to specify range of IP address for NETWORK or Workstation separately. These IP address are the same as my address range in FW-1 group Inter-NET.

******************************************
* Follow your dream! Unless it's the one *
* where you're at work in your underwear *
* during a fire drill. *
******************************************
Dessinateur / Draftsman &
Windows NT Administrator
Stephan Dubeau
Dessin Structural B.D. inc.
B.D. Structural Design inc.
mailto:[EMAIL PROTECTED] (Affaire/Business)
mailto:[EMAIL PROTECTED] (Amusement/Pleasure)

-----Original Message-----
From: Ryan Wilson [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, August 16, 2000 13:17
To: '[EMAIL PROTECTED]'
Subject: [FW1] HTTP Security & Websense

Hi Chris / Gary...

This may not be a "problem" with Websense. We run the same configuration.
What Browser are you guys using?? My predecessor was having the same problems using IE (no suprise).
At any rate it appears disabling all http1.1 settings in IE Internet options has done the trick here. So I'm not sure if this is a work-around for a Websense problem, or an IE problem.

hope it helps.

Ryan Wilson

        Date: Wed, 16 Aug 2000 14:49:33 +0100
        From: "Varnam, Gary" <[EMAIL PROTECTED]>
        Subject: RE: [FW1] HTTP Security & Websense

        Chris,

        I am having the same problem as yourself Websense is on NT4 SP5, and
        firewall version 4.0 on NT4.
        Support at websense blame the firewall for the problem and don't accept the
        fact that it worked okay when I was running version 3 of Websense.

        If anybody else on the list is experiencing this or know someone who is
        please let me know and I will use it the beat websense tech support with all
        our configurations cannot be wrong!

        Anybody with a solution is also invited to reply.

        Gary Varnam

        - -----Original Message-----
        From: Chris F [mailto:[EMAIL PROTECTED]]
        Sent: 14 August 2000 18:39
        To: Firewall One List
        Subject: [FW1] HTTP Security & Websense

        Hi All,

        FW1 4.1 SP2 on Solaris 2.6
        Websense v4.2.0 on NT4.0 SP5

        I'm having problems with FW1's HTTP security server
        and Websense. Sometimes, all HTTP traffic
        "disappears".

        Let's say I'm trying to go to cnn.com My browser will
        just sit try to load the page until the browser
        finally times out. FW1 logs nothing! No errors.
        Nothing!

        If I disable all my websense rules, it works. If I
        re-enable them, it works again -- as intended.

        I have 3 Websense rules. I have to disable them all,
        then re-enable them to "clear" this problem. Rebooting
        my Websense server doesn't fix it, so it's mostly
        likely the HTTP security server.

        Anyone else have a similar problem? Any fix??

        Another problem is this error message:
        "Failed to contact UFP: Unknown error"

        Gee...unknow error -- that helps! :)
        Any thoughts?

RE: [FW1] HTTP Security & Websense

Reply via email to