topic Re: websense webfilter as proxy in General Topics

websense webfilter as proxy

Javith — Wed, 25 Jun 2014 08:26:24 GMT

Hi All,

I have websense web filter license. I want to integrate it with PAN firewall. Could you share any documents to integrate it as proxy.?

Please guide. Thanks

Re: websense webfilter as proxy

Mystique — Wed, 25 Jun 2014 16:16:33 GMT

Palo Alto Networks does not intregrate with Websense. It uses either Brightcloud or proprietary PanDB, for looking up the categories. You can use either Brightcloud or PanDB, if you want the PANFWs to perform any URL filtering. You will need licenses for the same.

Re: websense webfilter as proxy

kadak — Wed, 25 Jun 2014 16:17:49 GMT

Hello Javith,

Palo Alto Networks does not integrate with Websense. It uses either Brightcloud or proprietary PanDB, for looking up the categories. PANFWs do not send out any Websense Integrated Service Protocol traffic. Please switch to either Brightcloud or PanDB, if you want the Palo Alto firewalls to perform any URL filtering.

But, you can definitely run Websense in front of PAN. You'd just have to have your users browsers setup to point to the Websense proxy (use AD for an IE environment), or by some other means route the browser traffic to the Websense proxy (maybe PBR). Then your PAN rule would allow the proxy to make outbound web connections and deny other sources so that the proxy isn't bypassed.

Hope that helps!

Thanks and regards,

Kunal Adak