Palo Alto Networks does not integrate with Websense. It uses either Brightcloud or proprietary PanDB, for looking up the categories. PANFWs do not send out any Websense Integrated Service Protocol traffic. Please switch to either Brightcloud or PanDB, if you want the Palo Alto firewalls to perform any URL filtering.
But, you can definitely run Websense in front of PAN. You'd just have to have your users browsers setup to point to the Websense proxy (use AD for an IE environment), or by some other means route the browser traffic to the Websense proxy (maybe PBR). Then your PAN rule would allow the proxy to make outbound web connections and deny other sources so that the proxy isn't bypassed.
Hope that helps!
Thanks and regards,
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!