Posted by: Jason Tramer
7.01, hot fix, known issue, unable to download filtering database, web filter, websense
I have been working with Websense to get a fix for an issue i have been having in Web filter 7.01 where I was unable to download the filtering database. This is apparently a known issue which has a hotfix. Here are the details of downloading and installing the hotfix.
1. Stop all Websense services.
When you stop all Websense services, the sequence of stopping them is important for the final three services only. Always end with the following services, in the order shown:
1. Stop Websense Policy Server.
2. Then, stop Websense Policy Broker.
3. Finally, stop Websense Policy Database.
Linux: Use the command ./WebsenseAdmin stop (Run the command from the /opt/Websense/ directory). This stops them in the correct sequence.
2. Back up the files listed below into a separate folder:
The default location for Windows is: C:\Program Files\Websense\bin\
natuning.ini (if present)
The default location for Linux is: /opt/Websense/bin/
natuning.ini (if present)
3. Extract the Hotfix zip file and locate the following files:
4. Replace the files listed above with the corresponding files included in the Hotfix zip file:
Default location in Windows: C:\Program Files\Websense\bin\
Default location in Linux: /opt/Websense/bin/
5. Make any needed configuration changes to natuning.ini.
If you have customized this file previously, start with your copy of the customized file, and then change or add settings that are provided by this Hotfix.
(a) To configure Network Agent to ignore HTTPS traffic:
Change the configuration variable ‘IgnorePort80′ to ‘IgnorePorts’ in the natuning.ini file. This parameter tells Network Agent to ignore traffic on any ports at the driver level.
IgnorePorts = 80, 443
(b) To prevent the IP addresses of the Network Agent interfaces from being displayed in Websense Manager:
Add the configuration variable ‘ShowNICsIP’ to the natuning.ini file and set it to false.
ShowNICsIP = false
In the natuning.ini file supplied with this hotfix both of these settings have been commented out. To enable one of the settings, simply remove the ‘#’ character from the beginning of the line.
6. Restart Websense services.
Windows: Use the Windows Services dialog box.
When you start all Websense services, always begin with the following services, in the order shown:
1. Websense Policy Database
2. Websense Policy Broker
3. Websense Policy Server (all copies)
Then, remaining services can be started in any order.
Linux: Use the command ./WebsenseAdmin start. This command starts the services in the proper sequence.