Hi,
Thanks for your email.
The config from PIX is fine as now I am able to see logs on Test Log server. Now I am trying to use Websense for URL filtering of Intranet pages. Pls see the details below and suggest if possible.
Clients are identified based on IP addresses and a policy should be made to permit authorized access of web apps based on URLs.
Please suggest if Websense can be used for URL filtering of Intranet made of private IP addresses. The details regarding the setup is as follows.
Firewalls: Two PIX525 in Active-Stdby FO mode. Inside IP 10.100.200.4/24
Websense
Mode : Intergarted Cisco PIX firewalls
Version: 6.1.1 with database downloaded (Aug28)
OS : Windows 2003 server
Physical Placement: In the inside zone of firewall. The application servers are currently placed in the same zone. Some Intranet servers will be accessed through DMZ zone also later on through a WAN link.
Physical Conenctivity: Server has 2 NIC. 1 NIC for Management (IP 10.100.200.6)
NIC 2 is used for monitoring (IP address 192.168.0.197/24)
Websense is configured to send block information through NIC 1
A policy is made that allows permitted category. In User defined two sub categories are created ?Allowed? and ?Blocked? and respective custom URLs are created in that. Only ?Allowed? category is permitted and other one blocked.
When respective pages are accessed the Test Log servers shows activity and the disposition comes as Blocked and Allowed URL but the URL that is blocked can also be accessed by user.
Regard & good Day,
