Is PaloAlto supports Websense webfilter? if supports, Please help me to get this done,.

Announcements

ATTENTION Customers, All Partners and Employees: The Customer Support Portal (CSP) will be undergoing maintenance and unavailable on Saturday, November 7, 2020, from 11 am to 11 pm PST. Please read our blog for more information.

Reply
Highlighted
L4 Transporter

Is PaloAlto supports Websense webfilter? if supports, Please help me to get this done,.

Hi All,

Is PaloAlto supports Websense webfilter? if supports, Please help me to get this done.

Regards,

Gururaj.


Accepted Solutions
Highlighted
L6 Presenter

PA has currently OEMed the Brightcloud database (and dynamic lookups) and is working on creating their own (or so I have been told - dunno if PA is OEMing another db or really creates their own) database (I guess after the announcement that Webroot bought Brightcloud last year or so).

So in terms of "does PA support url-categories?" the answer is yes.

But in terms of "does PA use websense for its url-categories" the answer is "no, it uses Brightcloud (and in future their own database)".

View solution in original post


All Replies
Highlighted
L6 Presenter

PA has currently OEMed the Brightcloud database (and dynamic lookups) and is working on creating their own (or so I have been told - dunno if PA is OEMing another db or really creates their own) database (I guess after the announcement that Webroot bought Brightcloud last year or so).

So in terms of "does PA support url-categories?" the answer is yes.

But in terms of "does PA use websense for its url-categories" the answer is "no, it uses Brightcloud (and in future their own database)".

View solution in original post

Highlighted
L4 Transporter

Hi Mikand,

we already have licensed Websense web filter and again we don't want to buy new URL filtering license for PaloAlto.

My question is that is it possible to integrate websense and PaloAlto OR is there any other way to get this done?

Regards,

Gururaj.

Highlighted
L6 Presenter

Perhaps you can get the money back for that websense license? ;-)

To my knowledge PA doesnt support thirdparty url-category databases such as websense (some rumours that ICAP might show up in future but I have no idea on when).

What you could do (assuming your websense is an appliance) is to put that in front (or behind) your PA and direct your webbrowsing through that box. And when the license expires for the websense box you buy a PA licens instead.

Otherwise I would recommend you to talk to your sales engineer and see if PA have some sort of "replacement discounts" or such (or if you can sell whats left of your websense license to somebody else and buy that PA license instead).

Highlighted
L4 Transporter

Thank you Mikand.

Highlighted
L3 Networker

You can definitely run Websense in front of PAN.  You'd just have to have your users browsers setup to point to the Websense proxy (use AD for an IE environment), or by some other means route the browser traffic to the Websense proxy (maybe PBR).  Then your PAN rule would allow the proxy to make outbound web connections and deny other sources so that the proxy isn't bypassed.

Cheers,

Mike

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!