help with using websense for dmz workstations

Unanswered Question
Jan 30th, 2007

I have a server on my internal network running Websense. For sake of discussion, the IP is 1.1.1.1

Workstations on DMZ1, off of my PIX 535, are in the 192.168.0.0 255.255.255.0

network

Below is what I have configured on my PIX

url-server (inside) vendor websense host 1.1.1.1 timeout 30 protocol TCP version 4 connections 5

filter url 80 192.168.0.0 255.255.255.0 0.0.0.0 0.0.0.0

It doesn't work. Using the cli utilities for Websense, on the server, the server is not receiving any requests from the DMZ workstations. I get 'page cannot be displayed' when attempting to surf the internet.

When I remove the two commands from the PIX, internet surfing works just fine.

Do I need to add a static command to the PIX for this communication with Websense to take place???

Thank you.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
acomiskey Tue, 01/30/2007 - 12:55

Maybe...

static (inside,dmz) 1.1.1.1 1.1.1.1 netmask 255.255.255.255

Also, do you have an acl in interface dmz allowing traffic in?

Actions

This Discussion