topic Re: ASA 5505 and Websense Traffic Flow in Network Security

ASA 5505 and Websense Traffic Flow

mabouchard — Mon, 11 Mar 2019 19:49:12 GMT

We use ASA 5505 appliances at our remote sites and connect to our core network over site to site

VPN's. We allow split tunneling from these remote ASA5505 for local PC's on the remote network segments for

Internet access. We have recently implemented Websense for web filtering and would like to intergate this with the ASA's. I have set this up in test and it works but it appears that all of the traffic is sent to Websense and routed out of our Corporate Internet connection. Is there a way to have it use the Websense filtering service to see if the destination URL's are allowed or blocked but then have the traffic go out the local ISP of these remote location if the URL is allowed?

Thanks

Re: ASA 5505 and Websense Traffic Flow

Jennifer Halim — Fri, 11 Feb 2011 02:11:37 GMT

No, unfortunately there is no such feature. The ASA VPN and the Websense is independant of each other, and there is no feature that integrate the requirement that you have.

Re: ASA 5505 and Websense Traffic Flow

leesutcliffe — Fri, 11 Feb 2011 10:35:08 GMT

You could exemt your websense box from the VPN interested traffic, so that it doesnt go over the tunnel.

You'll have to either play with the NAT rules on the site to site, ro give websense a diferent IP address.

That way when websense traffic hits the firewall, it isn't 'interested' therefore goes through the firewall as normal, rather than over the tunnel