Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started.

New Member

Websense Integration

I currently am integrating Websense Enterprise for IOS into my infrastructure. The filtering is working normally but I find that outside of the exclusive domains I have configured there is no caching occurring. I did a debug and found out like this to be the norm:

May 26 13:37:40.008: URLF: creating uis 0x8269DD80, pending request 1

May 26 13:37:40.008: URLF: domain name not found in the exclusive list

May 26 13:37:40.008: URLF: got an cbac queue event...

May 26 13:37:40.008: URLF: websns making a lookup request.

May 26 13:37:40.008: URLF: socket send successfull...

May 26 13:37:40.068: URLF: got a socket read event...

May 26 13:37:40.068: URLF: socket recv (header) successfull.

May 26 13:37:40.068: URLF: socket recv (data) successfull.

May 26 13:37:40.068: URLF: websns lookup code = 0

May 26 13:37:40.076: URLF: websns lookup description code = 1026

May 26 13:37:40.076: URLF: websns category number = 153

May 26 13:37:40.076: URLF: websns cache command = 0

May 26 13:37:40.076: URLF: websns cached entry type = 0

May 26 13:37:40.076: URLF: Site/URL allowed: sis 0x81FB7600, uis 0x8269DD80

May 26 13:37:40.076: URLF: deleting uis 0x8269DD80, pending requests 0u all

In looking at this it seems that the Websense server is determining if the URL can be cached. The question I have is how the caching is determined, on the Websense server or the Router? How do I enable caching so that performance can be increased? I have a case open with Websense but they have not been forthcoming in answering this question. Any help would be appreciated.



  • Other Security Subjects
New Member

Re: Websense Integration

definaing the exclusion domain on the cisco will help, so that the icso does not request this from the websense.

ip urlfilter exclusive-domain {permit | deny} domain-name