590 Deployment best practices

[mbrown]

I have some questions about best practices for CE 590 deployment using Websense.

Are there any advantages/disadvantages to using the CE 590 for querying websense over using the PIX to source those queries?

Is it more desirable to deploy the CE 590 closer to the end user or closer to the perimeter? In this particular case, the perimeter is removed from the user by a number of firewalls and routers.

I look forward to any input offered

[mmellet]

I looked over the following URL's and they have some key features that may help you in your decision between the CE 590 or PIX.

http://www.cisco.com/univercd/cc/td/doc/pcat/ce_icdn.htm

http://www.cisco.com/warp/public/cc/pd/fw/sqfw500/