• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

how to avoid Websense filtering for some machines

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 Firewall] >> HTTP Filtering >> how to avoid Websense filtering for some machines Page: [1]
Login
Message << Older Topic   Newer Topic >>
how to avoid Websense filtering for some machines - 15.Apr.2010 10:37:02 AM   
apur32

 

Posts: 6
Joined: 29.Mar.2010
Status: offline
We are having Websense licensing issues ( We are short of it ). Is there any way that for certain machines (IPs) can pass through ISA directly rather than passing to Websense for filtering to save licenses.

These are servers which we do not want to filter at all because there is no browsing going on these servers.

Apur
Post #: 1
RE: how to avoid Websense filtering for some machines - 15.Apr.2010 11:34:17 AM   
richardhicks

 

Posts: 477
Joined: 20.Jan.2009
From: Southern California
Status: offline
Absolutely. On each ISA firewall, create a file called ignore.txt and place it in the \windows\system32 folder. Add the machine names in all CAPS (don't ask why!) to the file and save it. Restart the Websense services and you're done.

_____________________________

Richard Hicks - Forefront MVP
http://tmgblog.richardhicks.com/
http://directaccess.richardhicks.com/

(in reply to apur32)
Post #: 2
RE: how to avoid Websense filtering for some machines - 15.Apr.2010 12:46:45 PM   
Jason Jones

 

Posts: 4663
Joined: 30.Jul.2002
From: United Kingdom
Status: offline
quote:

ORIGINAL: richardhicks

Absolutely. On each ISA firewall, create a file called ignore.txt and place it in the \windows\system32 folder. Add the machine names in all CAPS (don't ask why!) to the file and save it. Restart the Websense services and you're done.


Nice, LSNED 

_____________________________

Jason Jones | Forefront MVP | Silversands Ltd
My Blogs: http://blog.msedge.org.uk/ and http://blog.msfirewall.org.uk/

(in reply to richardhicks)
Post #: 3
RE: how to avoid Websense filtering for some machines - 16.Apr.2010 5:05:03 AM   
apur32

 

Posts: 6
Joined: 29.Mar.2010
Status: offline
Hi Richard,

Thanks for the prompt replay.

I have done the same as you advised but it did not work.

I included the machine names in the ignore.txt file on ISA server & placed it in \windows\system32 folder & restart the Websense filter service but it is still filtering the servers & some other machines which I don't want to filter in order to save licenses.

Apur

(in reply to richardhicks)
Post #: 4
RE: how to avoid Websense filtering for some machines - 16.Apr.2010 4:33:03 PM   
richardhicks

 

Posts: 477
Joined: 20.Jan.2009
From: Southern California
Status: offline
Looking at the Websense documentation, their recommendation is to 'restart the server' after making changes to ignore.txt. It appears that simply recycling the filtering service isn't enough. Give that a shot and let me know what happens.

_____________________________

Richard Hicks - Forefront MVP
http://tmgblog.richardhicks.com/
http://directaccess.richardhicks.com/

(in reply to apur32)
Post #: 5
RE: how to avoid Websense filtering for some machines - 20.Apr.2010 4:01:29 AM   
apur32

 

Posts: 6
Joined: 29.Mar.2010
Status: offline
Hi Richards,

I have restarted the server but it is still filtering the servers. I have contacted the Websense and they told me that there is another file in Windows\system32 folders

isa_ignore.txt

through which I can ignore URL, HOSTNAME and USERNAMES only. I have used it to ignore the URL and still testing it. But initially it looks to me that it is not working.

I will keep you posted on it.

Thanks for your help.
Apur

(in reply to richardhicks)
Post #: 6
RE: how to avoid Websense filtering for some machines - 20.Apr.2010 5:43:42 PM   
richardhicks

 

Posts: 477
Joined: 20.Jan.2009
From: Southern California
Status: offline
It was my understanding that isa_ignore.txt was only for intra-array communication, but if Websense support says otherwise, I'll take their word for it.

_____________________________

Richard Hicks - Forefront MVP
http://tmgblog.richardhicks.com/
http://directaccess.richardhicks.com/

(in reply to apur32)
Post #: 7
RE: how to avoid Websense filtering for some machines - 29.Apr.2010 7:40:49 AM   
apur32

 

Posts: 6
Joined: 29.Mar.2010
Status: offline
Just a quick update.....

Websense Support personnel remote to our system and try to fix the problem with

isa_ignore.txt

but the problem is still there.

I will keep you updated ....

(in reply to richardhicks)
Post #: 8
RE: how to avoid Websense filtering for some machines - 17.May2010 8:28:54 AM   
apur32

 

Posts: 6
Joined: 29.Mar.2010
Status: offline
Websense Support closed the call after trying different method which did not work. They said at the end that anything which goes out of the network to internet will be filtered with Websense.

This is pretty tricky situation now for us. We have to buy more licenses if we can not solve this issue.

Is there any other way we can solve it?

(in reply to richardhicks)
Post #: 9
RE: how to avoid Websense filtering for some machines - 18.May2010 10:22:45 AM   
pierreasdf

 

Posts: 21
Joined: 22.Aug.2008
Status: offline
Maybe something like this could work: If possible for you, you could deploy a second ISA server, without the Websense plug-in installed, and point these machines to this new ISA server (if they are secure NAT clients, you can change the default route to this ISA; if they are FW ou Web proxy clients, reconfigure them accordingly).

< Message edited by pierreasdf -- 18.May2010 10:23:45 AM >

(in reply to richardhicks)
Post #: 10
RE: how to avoid Websense filtering for some machines - 6.Aug.2011 4:44:24 AM   
wangyin

 

Posts: 5
Joined: 6.Aug.2011
Status: offline
Looking in the Websense documentation, their advice can be to 'restart the server' ideal after producing modifications to ignore.txt. It appears that merely recycling the filtering organization isn't enough. Give that the shot and allow me know what happens.

_____________________________

Cheap Gucci Shoes|Cheap Gucci Boots|Gucci Designer Shoes

(in reply to pierreasdf)
Post #: 11

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 Firewall] >> HTTP Filtering >> how to avoid Websense filtering for some machines Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts