topic Re: Websense not enabled in Network Security

Websense not enabled

Brent Rockburn — Mon, 11 Mar 2019 14:01:56 GMT

I believe I set thing up correctly on the c880 and I get this "DISABLED" for websense. Anybody know how to enable it?

ip inspect name TEST http urlfilter

ip urlfilter server vendor websense 10.x.x.x

TESTSTORE#sh ip urlfilter config

Websense URL Filtering is DISABLED

Primary Websense server configurations

=========================================

Websense server IP address Or Host Name: 10.x.x.x

Websense server port: 15868

Websense retransmission time out: 6 (in seconds)

Websense number of retransmission: 2

Websense server IP address Or Host Name: 10.x.x.x

Websense server port: 15868

Websense retransmission time out: 6 (in seconds)

Websense number of retransmission: 2

Secondary Websense servers configurations

============================================

Other configurations

=====================

Allow Mode: ON

System Alert: ENABLED

Audit Trail: DISABLED

Log message on Websense server: DISABLED

Truncate Hostname: DISABLED

Truncate Script-parameters: DISABLED

Maximum number of cache entries: 5000

Maximum number of packet buffers: 200

Maximum outstanding requests: 1000

Re: Websense not enabled

ajagadee — Thu, 23 Oct 2008 18:18:09 GMT

Brent,

Where is the IP Address 10.x.x.x located. Can you ping the 10.x.x.x ip address from the router through the right interface. If you want to source the URLFilter traffic from a specific interface, you can use the below command to achieve it.

ip urlfilter source-interface xxxxxxx

Also, make sure that the server is listening on the default port of 15868.

Regards,

Arul

*Pls rate if it helps*

Re: Websense not enabled

Brent Rockburn — Thu, 23 Oct 2008 18:32:54 GMT

I can telnet to port 15868 on the websense server from a machine behind the router so I know if can connect. on the fa 4 interface I have "ip inspect NMMFW out" I have also tried "ip inspect NMMFW in" and neither work but in my head I'm thinking it should be outbound requests that are inspected.

It's the "Websense URL Filtering is DISABLED" that troubles me.

Re: Websense not enabled

ajagadee — Thu, 23 Oct 2008 20:22:53 GMT

Brent,

I have seen this message before when the router is not able to access the websense server. Thanks for the confirming that you can telnet to the server from your LAN.

1. Can you telnet from the router itself

2. Show ip route for 10.x.x.x address

I want to make sure that the router can access the server.

Regards,

Arul

*Pls rate if it helps*

Re: Websense not enabled

Brent Rockburn — Tue, 28 Oct 2008 16:56:01 GMT

Hello,

I had to allow access from my core to the IP range of the tunnel interfaces on my spokes.

Seems to work fine now.

Thanks

Re: Websense not enabled

ajagadee — Tue, 28 Oct 2008 17:13:10 GMT

Brent,

Glad to know its working.

Regards,

Arul