Websense Enterprise Web Filtering

 

Product Information

Product Rating

Features star star star star star
Ease of Use star star star star
Performance star star star star star
Documentation star star star star
Support star star star star star
Value for Money star star star star
Overall Rating star star star star
For:

File type filter; integrates with Websense Enterprise.

Against:

Can be difficult to see which rules are applied.

Verdict:

If you've already got some Websense Enterprise components, Web Filtering will integrate into your existing infrastructure, but there are easy products to manage.

Related Group Test

Websense's Web Filtering application is part of its Websense Enterprise suite of tools. It requires a copy of Windows 2000/2003 Server and a compliant web server. We used it with Microsoft's IIS, but you can also use Apache.

This makes it a little more difficult to install than other products on test. Management is done via Websense Enterprise Manager, a Java-based application. With this you can manage any number of Websense deployments, and it's an effective centralized tool.

Websense Web Filtering works along the same lines as the other products on test – at its heart lies a URL database. Split into categories, it is this database that is used to rate sites.

On top of this you must create policies that define which categories you want to allow and which to deny. The interface isn't quite as simplistic as the one used by SurfControl, so it takes a bit longer to work out. In part, it's due to the range of icons used in each policy. Once you get used to them, it is simple to see which options are turned on and off. Websense also doesn't provide much of a default policy. The one provided by SurfControl lets you see exactly how the app works.

The Web Filter has several advanced features beyond basic URL filtering.

It can block by keyword and has a protocol and file-type filter. You can, for example, block MP3 downloads. The filter successfully blocked all of our attempts to access unauthorized sites.

Time quotas can be set for each profile and you can filter based on username, IP address or subnet. If you pay for the license you can install the bandwidth optimizer, which lets you control network usage, including blocking certain protocols when network usage hits your defined threshold.

All these options are defined as objects, so creating a policy is as easy as selecting the building blocks you've already created.

Websense's Web Filtering is a good product and part of a larger suite of web security tools. However, it lacks the ease of use and simplicity of rival products, such as SurfControl's Web Filter.

 
 
 

SC Webcasts

Security beyond the (fire)wall

Streaming live on 19th June at 3pm BST

This webcast addresses the technological challenges of maintaining full control of your most sensitive information - even once it goes beyond the firewall - while maintaining the freedom and flexibility necessary to allow your staff and other stakeholders to work as efficiently as possible. Tune in for free to hear from our regular and popular guest speaker, Bola Rotibi from (ISC)2 application security advisory board. To secure your place, please click here.


The truth about vulnerability management: Compliance checkbox or real protection?

Streaming live 2nd July at 3pm BST

How often are you assessing network vulnerabilties? Is your current vulnerability management program merely a compliance checkbox for auditors? Tune into this webcast live to hear from Joerg Weber, head of attack monitoring, Barclays, Lee Barney, an information risk consultant, and Skybox's Michelle Cobb on how you can prioritise vulnerabilities in a way that makes sense for your specific threat posture. Secure your free place here.

SC Featured Webcast

Employee file sharing: the good, the bad and the ugly

This recently held webcast unveiled the full results from the latest data security survey, where it was revealed that 50 per cent of the information security professionals asked said that they had 'no real visibility' of how data is being sent within and outside the company. Guest speakers included the director of information security from Monster.co.uk and the ISO from Atos. If you missed the live show, you can tune into the on-demand video here.

SC Whitepapers

Java security: Balancing existing testing platforms with open source solutions

In a rush to get new products out to market quickly, companies expose themselves to the risk of software failure. Java developers often turn to open source solutions to help protect themselves from risk. This new whitepaper explains how you can use your existing testing platforms alongside open source solutions to fix those issues related to both security and quality within your Java code. To download the paper for free, please click here.


DDoS and downtime: Considerations for risk management

The purpose of this paper is to start a conversation about the often overlooked risk of downtime caused by DDoS attacks and to provide sufficient content for risk managers to account for the DDoS threat as they evaluate risks to their day-to-day operations and long-term mission. To read the paper in full, please download it for free here.


Ponemon 2012 Global Encryption Trends Study

In Ponemon's recent Global Encryption Study, the organisation surveyed 4,205 information security professionals across seven countries to examine how encryption has evolved over the last eight years. The study focused on data protection priorities, budgeted expenditures for encryption and the types of encryption technologies involved, with the findings revealing some interesting insight into the relationship between encryption and its impact on the security position of organisations. To read the full report for free, please download it here.


Advanced spear phishing: The rise of industrial phishing attacks

With phishing still the most common form of attack, hackers are now engaging in industrial-scale phishing attacks that leverage sophisticated customisation and delivery techniques. Borrowing tactics from cloud computing and database marketing, this study looks at longline phishing - an advanced form of spear phishing, which has higher clickthrough and penetration rates than traditional attacks, potentially causing a higher risk to IT security departments across the world. To read the study for free, please click here.


Home | News | Products | Whitepapers | Jobs | Subscribe | Contact Us | About Us | Advertising | Sitemap | Editorial | Subscribe to our RSS feeds RSS

This material may not be published, broadcast, rewritten or redistributed in any form without prior authorization.

Your use of this website constitutes acceptance of Haymarket Media's Privacy Policy and Terms & Conditions