triton web help

Getting Started

Beginning with 7.8.4, information sent by WebCatcher will include IPv6 addresses.

Note

Intranet sites are not sent by WebCatcher. This includes all sites with IP addresses in the 10.xxx.xxx.xxx,

172.16.xxx.xxx, and 192.168.xxx.xxx ranges.

WebCatcher data is sent to Websense, Inc., via HTTP post. You may need to create roles or make other changes on your proxy server or firewall to permit the outgoing

HTTP traffic.

Websense Technical Support



Web Security Help | Web Security Solutions | Version 7.8.x

Technical information about Websense software and services is available 24 hours a day at support.websense.com

, including:



 the searchable Websense Knowledge Base (made up of a Solution Center,

Technical Library, and customer forums)

Webinars and show-me videos product documents and in-depth technical papers answers to frequently asked questions

For additional questions, click the Contact Support tab at the top of the page.

The contact page includes information for finding solutions, opening an online support case, and calling Websense Technical Support.

For faster phone response, please use your Support Account ID, which you can find in the Profile section at MyWebsense .

For telephone requests, please have ready:



Websense subscription key

Access to the management console for your solutions (for example, the TRITON console, Appliance manager, Content Gateway manager)

Access to the machine running reporting tools and the database server (Microsoft

SQL Server or SQL Server Express)

Familiarity with your network’s architecture, or access to a specialist

Web Security Help



Getting Started



Websense Web Security Solutions

The Web Security

Dashboard

Web Security Help | Web Security Solutions | Version 7.8.x

The Threats tab of the Status > Dashboard page appears first when you log on to the

TRITON console and connect to the Web Security manager. It shows information about suspicious activity that may be related to malware threats in your network.

The type of information and level of detail shown depends on your subscription level.

Web Security Gateway or Web Security Gateway Anywhere is required, for example, to display information about outbound threats and to provide detailed forensic data

about the threats. See

Threats dashboard

, page 35 .

Dashboard elements are visible to Super Administrators and those delegated administrators with permission to view reports on the Web Security Dashboard (see

Editing roles

, page 354



Delegated administrator access to the Risks, Usage, and System dashboards is configured separately from Threats dashboard access.

Delegated administrators with Threats dashboard access can also be granted permission to view forensics details associated with advanced malware threats.

See

Reviewing threat-related forensic data

, page 41

The first time an administrator logs on to the Web Security manager, then navigates away from the dashboard, the Save and Deploy button activates. This happens regardless of whether any changes were made, in order to save default dashboard settings for each administrator account.

After the initial defaults are saved, navigating away from the dashboard activates the

Save and Deploy button only when charts are added, removed, or edited.

The dashboard includes 3 additional tabs:



Risks shows information about blocked and permitted requests for URLs that fall

into the Security Risk class. The amount of information depends on your subscription level. See

Risks dashboard

, page 42 .

Usage shows information about traffic patterns in your network, including

bandwidth information and summaries of blocked and permitted requests. See

Usage dashboard

, page 43

System shows alert messages, status information, and graphical charts that show

the current state of your deployment, focusing on Internet activity in your

network. See

System dashboard

, page 43 .

Web Security Help



The Web Security Dashboard

The Risks, Usage, and System dashboards can each display up to 12 elements (charts, status summaries, or counters) at a time. Most dashboard charts can be customized to change their time period (today, last 7 days, last 30 days, and so on) and their display format (stacked column, stacked area, multi-series line, and so on). You can include multiple versions of the same chart on a tab (for example, showing different time periods).



Dashboard elements are updated every 2 minutes.

All elements on a tab are also updated when any element on the tab is modified.

For example, if the time period for one chart is changed, data is refreshed in all of the elements on the page.

The available set of dashboard elements depends on your subscription type.

Charts related to the hybrid service, for example, are available only for Web

Security Gateway Anywhere.

To add an element to the tab, click Add Charts, then see

Adding elements to a dashboard tab

, page 44,

for instructions.



To remove an element from the tab, click the Options icon ( ) in the element title bar, then select Remove.

To access all editing options for an element, click the Options icon in the element title bar, then select Edit.

Clicking a pie, bar, or line chart typically opens an investigative report with more details. Some security-related charts link instead to the Threats dashboard.

Up to 4 buttons appear in the dashboard toolbar:

