Instruction/ maintenance manual of the product v5.5 Surf Control
Go to page of 77
™ SurfControl W eb Filter Starter Guide V ersion 5.5.
SurfControl Web Filter v5.5 Starter Guide i Notices N OTICES ©1996–2008, Websense Inc. All rights reserved. 10240 Sorrento V alley Rd., San Diego, CA 92121, USA Published January 2008 This document.
ii Starter Guide SurfControl Web Filter v5.5 Notices.
SurfControl Web Filter for ISA v5.5 Starter Guide iii T ABLE OF C ONTENTS Notices ................. ................ ................ ................ ................ .................... ................ ........................ i Introduction .....
iv Starter Guide SurfControl Web Filter for ISA v5.5 Network Dependent ...... .................... ................ ................ ................... ................ ............ 52 User Name Resolution .............. ... .... ... ... ... ........
Chapter 1 Introduction Microsof t ISA Server Edition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . page 2 System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
2 Starter Guide SurfControl Web Filter for ISA v5.5 I NTRODUCTION Microsoft ISA Server Edition 1 M ICROSOFT ISA S ERVER E DITION SurfControl Web Filter for ISA inte grates fully with Microso ft ISA server , in orde r to preve nt web ba se d threats.
SurfControl Web Filter for ISA v5.5 Starter Guide 3 I NTRODUCTION System Requiremen ts 1 S YSTEM R EQUIREMENTS The minimum and recomme nded specif ications for installing SurfCont rol Web Filter and SurfControl Report Cen tral are descr ibed in the sec tions below .
4 Starter Guide SurfControl Web Filter for ISA v5.5 I NTRODUCTION System Requirements 1 G ENERAL S YSTEM R EQUIREMENTS The recommended ge neral specifications for your Web Filter installa tion are sho.
SurfControl Web Filter for ISA v5.5 Starter Guide 5 I NTRODUCTION System Requiremen ts 1 SQL S ERVER L ICENSING If you have purcha sed SQL Server under a Ser ver plus Device CALs, or a Server plus Use.
6 Starter Guide SurfControl Web Filter for ISA v5.5 I NTRODUCTION System Requirements 1.
Chapter 2 Inst allation Decisions Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . page 8 Network Considerations . . . . . . . . . . . . . . . . . . . . . . .
8 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLATION D ECISIONS Introduction 2 I NTRODUCTION There are cert ain decisions you must make before you star t to inst all SurfControl Web Filter , based on the design of your network.
SurfControl Web Filter for ISA v5.5 Starter Guide 9 I NST ALL ATION D ECISIONS Network Consid erations 2 N ETWORK C ONSIDERATIONS Y ou can install SurfContro l on a single ISA Server or in multi-server arrays. In an ISA S tandard Edition installation, W eb Filter is installed on a single ISA Server .
10 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLATION D ECISIONS Network Considerations 2 T o resolve an authentication issue: • Use a Local Admin account to log into the Web Filter server(s).
SurfControl Web Filter for ISA v5.5 Starter Guide 11 I NST ALL ATION D ECISIONS Firewall Po rt Configurati on 2 F IREWALL P ORT C ONFIGURATION Web Filter for ISA requires you to edit you r syste m policy to allow Web Filter to communicate across certain network port s.
12 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLATION D ECISIONS ISA Server Authentication 2 ISA S ERVER A UTHENTICATION Y ou can use ISA Se rver to authenti cate your users, if you don’t want to us e NetBIOS or EUM. This procedure is dif ferent, depending on whether you are using ISA Ser ver 2000 or 2004 and above.
SurfControl Web Filter for ISA v5.5 Starter Guide 13 I NST ALL ATION D ECISIONS User Name Resolution 2 U SER N AME R ESOLUTION By default, Sur fControl Web Filter doesn’t m onitor user na mes. The Configuration Wizard enables you to monitor your u s ers by name, in the following ways: • By using ISA Server to authenticate user names.
14 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLATION D ECISIONS User Name Resolution 2 M ETHODS OF I NSTALLING EUM Y ou can install EUM in one of two ways: 1 Install an EUM Agent on your domain controlle rs or Novell NetWare NDS T ree Server .
SurfControl Web Filter for ISA v5.5 Starter Guide 15 I NST ALL ATION D ECISIONS User Name Resolution 2 2 Fro m th e me n u, selec t Poli cies Audit . Ens ure that Au d it the se Even ts is checked. 3 En sure security lo gs are set t o overwrite as n eeded.
16 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLATION D ECISIONS User Name Resolution 2 N ET W ARE EUM Web Filter also e nables you to monitor users by t heir Nove ll NetW are user name. The Novell version of EUM is called NetWareEUM. NetW areEUM works in the same way as EUM.
SurfControl Web Filter for ISA v5.5 Starter Guide 17 I NST ALL ATION D ECISIONS User Name Resolution 2 Table 2-2 Logging Levels T HE EUM L OGIN A GENT The Login Agent enable s you to use the EUM without hav ing to inst all anything on your domain controllers .
18 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLATION D ECISIONS User Name Resolution 2 The EumLogin.ini file Below is a copy of the supplied .ini file [Surfcontrol_Servers] # The [Surfcontrol_Servers] section of the EumLogin.ini file is used to set the # server names to be used for each i nstance of SurfControl Web Filter.
SurfControl Web Filter for ISA v5.5 Starter Guide 19 I NST ALL ATION D ECISIONS User Name Resolution 2 How to configure the file The table be low describes the various sections of the Eu mLogin.ini file and how to enter your info rmation. Table 2-3 The EumLogin.
20 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLATION D ECISIONS User Name Resolution 2 Configuring a log on and logoff script Y ou need to create a new logon and logof f script, or modify an existing one, to call the EUM Login agent ( ScEumLoginAgent.
SurfControl Web Filter for ISA v5.5 Starter Guide 21 I NST ALL ATION D ECISIONS Database Consid erations 2 D ATABASE C ONSIDERATIONS Before you start to install Web Filter , you should decide: • Which datab ase platform you plan to use (SQL Server Express or SQL Ser v er).
22 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLATION D ECISIONS Database Cons id e ra ti ons 2 3 T ype the following: sqlcmd -S.sqlexpress 4 Y ou should get a prompt like this: 1> 5T y p e : Exit to exit sqlcmd 6 Open the SQL Computer Man ager .
SurfControl Web Filter for ISA v5.5 Starter Guide 23 I NST ALL ATION D ECISIONS Database Consid erations 2 Reasons to Install SQL Se rver on a Dedicated Server Use SQL Server 2000 or 2005 on a dedicat.
24 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLATION D ECISIONS Other Considerations 2 O THER C ONSIDERATIONS This section contains general info rmation that you should be aware of when installing and configuring SurfControl W eb Filter .
SurfControl Web Filter for ISA v5.5 Starter Guide 25 I NST ALL ATION D ECISIONS Other Cons iderations 2 Y ou can change the Customer Feedb ack and Company & Intranet settings From the Web Filter Settings in the Enterprise Manager . See the Administrator ’s Guide fo r mor e details.
26 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLATION D ECISIONS Other Considerations 2 Before installation, make sure the Remote Administration clie nt computer meets th e minimum requi.
Chapter 3 Inst alling W e b Filter Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . page 28 Inst all ing SQL Server Express (optional) . . . . . . . . . . . . .
28 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLING W EB F ILTER Introduction 3 I NTRODUCTION The following sections show you how to install W eb Filter Service Pack 3 along with instructions on how to install SQL Server an d W eb Filter ve rsion 5.
SurfControl Web Filter for ISA v5.5 Starter Guide 29 I NST ALLING W EB F ILTER Installing SQL Server Express (optiona l) 3 I NSTALLING SQL S ERVER E XPRESS ( OPTIONAL ) If you plan to use SQL Server Express for your database, you must insta ll it in the following order before installing Web Filter: 1 Download and install .
30 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLING W EB F ILTER Installing SurfControl W eb Filter 3 I NSTALLING S URF C ONTROL W EB F ILTER Y ou can cancel the installation of W e b Filter at any time by clicking Cancel . Y ou will have to restart the installation proces s if you decide to run the ins tall again at a later date.
SurfControl Web Filter for ISA v5.5 Starter Guide 31 I NST ALLING W EB F ILTER Installing SurfCo ntrol Web Filter 3 4 Click Next. 5 If the setup program does not detect a suitable da tabase, the Select Dat abase Insta llation Options is displayed. . 6 Y ou can now choo se one of th e following database o ptions: 7 Click Next .
32 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLING W EB F ILTER Installing SurfControl W eb Filter 3 8T h e Product T ype screen is displayed.
SurfControl Web Filter for ISA v5.5 Starter Guide 33 I NST ALLING W EB F ILTER Installing SurfCo ntrol Web Filter 3 12 Y ou will now see a screen giving you a summary of the installation opti ons you have chosen: Review your settings before st arting the installation.
34 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLING W EB F ILTER Installing SurfControl W eb Filter 3 14 Once the files are copied across an Install Wizard Comp lete screen will indicate that Web Filter has been successfully installed: Click Finish to close the setup program.
SurfControl Web Filter for ISA v5.5 Starter Guide 35 I NST ALLING W EB F ILTER Installing SurfCo ntrol Web Filter 3 C HANGES TO THE S ERVER The Web Filter setup program makes the following changes to the server: • Places the Web Filter icon in the Notification Area at startup.
36 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLING W EB F ILTER Configuring W eb Filter 3 C ONFIGURING W EB F ILTER The wizard will launch after you have fi nished the complete ins tallation pr ocess on your W eb Filter server . Perform the following steps.
SurfControl Web Filter for ISA v5.5 Starter Guide 37 I NST ALLING W EB F ILTER Configuring Web Filter 3 3T h e Customer Information screen is displaye d: Fill in your details to register with SurfControl. Registered us ers can sch edule live updates of the Internet Threat Database.
38 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLING W EB F ILTER Configuring W eb Filter 3 7 If you have entered a Web Filter license key , the Adaptive Threat Intelligence scre en is displayed: •S e l e c t Disable Anti-Virus Agent if you don’t wa nt to use the Anti-V irus Agent.
SurfControl Web Filter for ISA v5.5 Starter Guide 39 I NST ALLING W EB F ILTER Configuring Web Filter 3 10 The Select Database screen is displaye d: Fill in the fields as follows: • Server - Enter the name or IP address of the serve r where your SQL Server Exp ress, or SQL Server dat abase is located.
40 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLING W EB F ILTER Configuring W eb Filter 3 13 Click Next . 14 The Privacy Options screen is displayed.
SurfControl Web Filter for ISA v5.5 Starter Guide 41 I NST ALLING W EB F ILTER Configuring Web Filter 3 18 Y ou will now see the Corporate Network Detection Serv ice Configuration screen: This service.
42 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLING W EB F ILTER Configuring W eb Filter 3 21 The Automatic Dat abase Management screen is displayed: T o keep yo ur database working ef ficiently , select Archive and pur ge monitored traffic dat abase once a month .
SurfControl Web Filter for ISA v5.5 Starter Guide 43 I NST ALLING W EB F ILTER Configuring Web Filter 3 25 The E-mail Notifications screen is displayed: Web Filter can notify you w hen system events occur . Fill in the fields as follows: • E-mail Server: Enter the name or IP addre ss of the e-mail server for your domain.
44 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLING W EB F ILTER Configuring W eb Filter 3 27 The Categorization screen is displayed: 28 Select the Anonymously s end VCA and uncategorized dest ination information to Sur fControl check box, if you want to send uncategorize d we b site information anonymously to SurfCont rol.
SurfControl Web Filter for ISA v5.5 Starter Guide 45 I NST ALLING W EB F ILTER Configuring Web Filter 3 36 The User Name Resolution screen is displayed: By default, User Name Resolution is not selected.
46 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLING W EB F ILTER Configuring W eb Filter 3 • Username and Pas sword - Y ou need to enter a valid NDS tree username and p assword to enable W eb Filter to identify NetW are users. 39 Click Next .
SurfControl Web Filter for ISA v5.5 Starter Guide 47 I NST ALLING W EB F ILTER Configuring Web Filter 3 • If there is a serious problem with a task, you will see a failure icon next to it. If this happens, the Skip button will be disabled and you must go back to c orrect your settings.
48 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLING W EB F ILTER Installing Service Pack 3 3 I NSTALLING S ERVICE P ACK 3 This section contains information on Installing W eb Filter Service Pack 3. Y ou can cancel the installation at any time by clicking Cancel .
SurfControl Web Filter for ISA v5.5 Starter Guide 49 I NST ALLING W EB F ILTER Installing Service Pack 3 3 6 Y ou can now make a backup of your existing application datab ases using the Upgrade Option.
50 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLING W EB F ILTER Installing Service Pack 3 3 9 Click Install to start the inst allation. A progress bar will indicate how the insta llation is progressing: 10 Y ou should now see the Inst all Wizard Complete screen : Choose when to restart th e compute r: now or later .
Chapter 4 Further Configuration Post Inst allation T asks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . page 52 User Name Resolution . . . . . . . . . . . . . . . . . . . . . . . . .
52 Starter Guide SurfControl Web Filter for ISA v5.5 F URTHER C ONFIGURATION Post Installation Tasks 4 P OST I NSTALLATION T ASKS Following the inst allation of Web Filter , there are a nu mber of tasks you may need to perform. Some apply to all installations, others are depend ent on your network configuration o r operating system set up.
SurfControl Web Filter for ISA v5.5 Starter Guide 53 F URTHER C ONFIGURATION User Name Resolution 4 U SER N AME R ESOLUTION By default, Su rfControl Web Filter r esolves user n ames by issuing a NetBIOS query based on the MAC address. W eb Filter also includes the Enterprise User Monitor (EUM) utility for resolving user names in a routed network.
54 Starter Guide SurfControl Web Filter for ISA v5.5 F URTHER C ONFIGURATION User Name Resolution 4 2T h e SurfControl Enterp rise User Monitoring Installatio n screen is displayed. Click Next . 3T h e Hostname screen is displayed. • Enter the IP address of the Web Filter serv er .
SurfControl Web Filter for ISA v5.5 Starter Guide 55 F URTHER C ONFIGURATION User Name Resolution 4 7T h e Ignore User Account s screen is displayed. Select the user account s who se logo n or logoff activity does not ne ed to be reported, for instance, Systems Management Server (SMS) and antiviru s accoun ts.
56 Starter Guide SurfControl Web Filter for ISA v5.5 F URTHER C ONFIGURATION User Name Resolution 4 The EUM Agent on the domain controller w ill wait te n minutes before checking for any changes made in the scua.ini file. The frequency of this can be changed by altering a regi stry setting on individual domain controllers.
SurfControl Web Filter for ISA v5.5 Starter Guide 57 F URTHER C ONFIGURATION User Name Resolution 4 • T o a dd a new W e b Filter server , type an entry underneath th e [surfCONTROL_Services] sectio.
58 Starter Guide SurfControl Web Filter for ISA v5.5 F URTHER C ONFIGURATION User Name Resolution 4 5 Press enter . Automatically loading the NetWare EUM T o auto matically load the NetW a re EUM every time th e server is res tarted, perform th e following st eps: 1 Edit the sys:systemautoexec.
SurfControl Web Filter for ISA v5.5 Starter Guide 59 F URTHER C ONFIGURATION Install SurfControl Report Central 4 I NSTALL S URF C ONTROL R EPORT C ENTRAL T o prod uce reports on the Internet traf fic monitored by W eb Filter , you need to inst all SurfControl Report Central, either as a download from http://www .
60 Starter Guide SurfControl Web Filter for ISA v5.5 F URTHER C ONFIGURATION Installing the Remote A dministration Client 4 I NSTALLING THE R EMOTE A DMINISTRATION C LIENT From the Remote Administration Client installation you can: • View monitored traf fic.
SurfControl Web Filter for ISA v5.5 Starter Guide 61 F URTHER C ONFIGURATION Installing the Remot e Administration Client 4 3T h e License Agreement sc reen is displayed. Select I accept the terms of th e licen s e ag re eme nt . 4 Click Next . 5T h e Select Dat a base In stallation Options screen is displayed.
62 Starter Guide SurfControl Web Filter for ISA v5.5 F URTHER C ONFIGURATION Installing the Remote A dministration Client 4 6T h e Product T ype screen is displayed. Select SurfContro l Web Filter . 7 Click Next . 8T h e Setup T ype screen is displayed.
SurfControl Web Filter for ISA v5.5 Starter Guide 63 F URTHER C ONFIGURATION Installing the Remot e Administration Client 4 10 The Select Server Platform T ype screen is displayed. Select Microsof t ISA Server . 1 1 Click Next . 12 The Installation Summary screen is displayed.
64 Starter Guide SurfControl Web Filter for ISA v5.5 F URTHER C ONFIGURATION Installing the Remote A dministration Client 4 13 The InstallShield Wizard Complete screen is displayed. 14 Click Finish . The Configurat ion Wizard will start automatically .
SurfControl Web Filter for ISA v5.5 Starter Guide 65 F URTHER C ONFIGURATION Firewall Policy Rules 4 F IREWALL P OLICY R ULES When installing W eb Filter on ISA Se rver 2004 or 2006 a nd Windows Serve.
66 Starter Guide SurfControl Web Filter for ISA v5.5 F URTHER C ONFIGURATION Firewall Po licy Rules 4 10 From the Connections tab, click LAN Settings . 1 1 Select Use a Proxy Server . 12 Select Bypas s proxy server for local addresses . 13 Click OK . 14 Click OK again to close the dialog box.
SurfControl Web Filter for ISA v5.5 Starter Guide 67 F URTHER C ONFIGURATION Firewall Policy Rules 4 11 E n t e r 1024 in the Port Range From field. 12 Enter 65535 in the Port R ange T o field. 13 Click OK , then Next . 14 Select No from the Secondary Connections screen.
68 Starter Guide SurfControl Web Filter for ISA v5.5 F URTHER C ONFIGURATION Firewall Po licy Rules 4 14 Select No from the Secondary Connections screen. Click Next . 15 Click Finish . 16 From the Add Prot oco ls dialog box, expand the User Defined folder and select th e Protocol you set up.
Appendix Cont act T echnical Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . page 70 Sales and Feedback . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
70 Starter Guide SurfControl Web Filter v5.5SurfControl Web Filter v5.5 A PPENDIX Contact T echnical Sup port C ONTACT T ECHNICAL S UPPORT Websense provides technical information about SurfControl pro.
SurfControl Web Filter v5.5SurfControl Web Filter v5.5 Starter Guide 71 A PPENDIX Contact Technical Support If your issue is urgent, please call one of the of fices listed below . Y ou will be routed to the first available technician, who will gladly assist you.
72 Starter Guide SurfControl Web Filter v5.5SurfControl Web Filter v5.5 A PPENDIX Sales and Feedback S ALES AND F EEDBACK For product and pricing info rmation, or to place an order , contact W ebsense. T o find your nea rest Websense of fice, please visit our web site: www .
An important point after buying a device Surf Control v5.5 (or even before the purchase) is to read its user manual. We should do this for several simple reasons:
If you have not bought Surf Control v5.5 yet, this is a good time to familiarize yourself with the basic data on the product. First of all view first pages of the manual, you can find above. You should find there the most important technical data Surf Control v5.5 - thus you can check whether the hardware meets your expectations. When delving into next pages of the user manual, Surf Control v5.5 you will learn all the available features of the product, as well as information on its operation. The information that you get Surf Control v5.5 will certainly help you make a decision on the purchase.
If you already are a holder of Surf Control v5.5, but have not read the manual yet, you should do it for the reasons described above. You will learn then if you properly used the available features, and whether you have not made any mistakes, which can shorten the lifetime Surf Control v5.5.
However, one of the most important roles played by the user manual is to help in solving problems with Surf Control v5.5. Almost always you will find there Troubleshooting, which are the most frequently occurring failures and malfunctions of the device Surf Control v5.5 along with tips on how to solve them. Even if you fail to solve the problem, the manual will show you a further procedure – contact to the customer service center or the nearest service center
