Implementing Websense in network with PIX 515

[h.stepp]

We are in the process of installing a Websense server in our network and wanted to ask for opinions/recommendations on the location that would be best for installing a Websense server. Should it by on the inside of my firewall or in the DMZ? From what I have been reading on the documentation so far it does not look like there is really a need to put it in the DMZ.

[ellis_b]

Personally, I would stick it in the internal side. I like to stick resources that are going to be used by outside the network (WWW server, SMTP, etc) in the DMZ.

Brad

www.SecurityIE.com

[c.reglat]

HI,

If only people from your inside network are going to use websense, then I would say Inside network. Put it on the DMZ if other branches needs to be filtered by websense.

Hope it helped :)

[scott.renfro]

You want the Websense on the same segment wherever you place it to minimize traffic.