I forward URL lookups from a remote PIX.
I use N2H2 and not Websense, but the therory is the same. As long as you are not using EzVPN and can control the traffic that passes through the tunnel with the crypto map command. Why not specify that your URL filter server is available through the tunnel.
Works for me.
Graham