Here is the config I used for our 2970. I tried it on a 2950 also with success. We also are using dot1Q trunking and we have had no issues with Websense not seeing traffic from all VLANs.
monitor session 1 source interface Gi0/1
monitor session 1 destination interface Gi0/2 ingress untagged vlan 1
Ken