12.07.2015 Views

Quick Start for Network Agent 5-Step Quick Start See - Websense ...

Quick Start for Network Agent 5-Step Quick Start See - Websense ...

Quick Start for Network Agent 5-Step Quick Start See - Websense ...

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

<strong>Quick</strong> <strong>Start</strong> <strong>for</strong> <strong>Network</strong> <strong>Agent</strong><strong>Network</strong> Interface Cards (NICs)NOTEThe NICs (network interface cards) on machines running <strong>Network</strong><strong>Agent</strong> must be connected to your hub or switch, enabled in theoperating system, and activated.Each NIC used <strong>for</strong> monitoring must capture all packets on the network,not only the packets that are addressed directly to it (promiscuousmode).Complete the NIC hardware setup prior to software installation. Detailsin this section help you select the NICs you need to activate.After you set up the hardware and install <strong>Websense</strong> software, configure <strong>Network</strong> <strong>Agent</strong>s in <strong>Websense</strong>Manager. Specify the network segments where <strong>Network</strong> <strong>Agent</strong> should monitor or filter traffic, thenetwork interface card (NIC) to use, and the handling method <strong>for</strong> HTTP and other protocols.Use the planning worksheets to capture this in<strong>for</strong>mation.NICs on the <strong>Network</strong> <strong>Agent</strong> machineYou can install <strong>Network</strong> <strong>Agent</strong> on 1 or more machines (but only once on each machine). Each<strong>Network</strong> <strong>Agent</strong> machine must use at least one designated network interface card (NIC). In theexample, <strong>Network</strong> <strong>Agent</strong> uses one NIC <strong>for</strong> monitoring traffic, and another to block.Each NIC that <strong>Network</strong> <strong>Agent</strong> uses <strong>for</strong> monitoring must be able to see all inbound and outboundtraffic assigned to it. <strong>Network</strong> <strong>Agent</strong> needs to see the user IP addresses. Do not place <strong>Network</strong> <strong>Agent</strong>in a location where the original user IP addresses have been translated by another network device(such as a router or other <strong>Network</strong> Address Translation device).SwitchesIf the device connected to the <strong>Network</strong> <strong>Agent</strong> machine is a switch, it must support port spanning (alsoknown as mirroring). Traffic on monitored ports is simultaneously sent to the monitoring port towhich <strong>Network</strong> <strong>Agent</strong> is connected.<strong>Quick</strong> <strong>Start</strong> 8 <strong>Network</strong> <strong>Agent</strong>

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!