Websense Web Security

Version 1

    This template assesses the status and overall health of services as well as the performance of the Websense Web Security.


    Prerequisites: WMI access to the target server.

    Credentials: Windows Administrator on the target server.


    Note: This template was created on Websense Web Security v 7.7.3.


    Monitored Components

    Service: Websense Control Service

    This monitor returns CPU and memory usage of Websense Control Service. It is responsible for service configuration and management.

     

    Service: Websense Filtering Service

    This monitor returns CPU and memory usage of Websense Filtering Service. It interacts with your integration product and Network Agent to filter Internet requests. Filtering Service either permits the Internet request or sends an appropriate block message to the user.

     

    Service: Websense Log Server

    This monitor returns CPU and memory usage of Websense Log Server. It sends records of Internet activity to the Log Database. It also sends category names, protocol names, and risk class names from the Master Database to the Log Database.

     

    Service: Websense Network Agent

    This monitor returns CPU and memory usage of Websense Network Agent. In a stand-alone deployment, Network Agent manages the filtering of all protocols, including HTTP, HTTPS, and FTP. Network Agent detects network activity to support the bandwidth filtering and protocol management features, and to log the number of bytes transferred. In an integrated deployment, Network Agent is optional. In this case, Network Agent manages the Internet protocols that are not managed by your integration product. Network Agent can also be used to detect HTTP network activity and instruct Filtering Service to log this information.

     

    Service: Websense Policy Broker

    This monitor returns CPU and memory usage of Websense Policy Broker. It manages requests from Websense components for policy and general configuration information.

     

    Service: Websense Policy Database

    This monitor returns CPU and memory usage of Websense Policy Database. It stores Websense software settings and policy information. This database is installed with Policy Broker, and cannot be installed separately.

     

    Service: Websense Policy Server

    This monitor returns CPU and memory usage of Websense Policy Server. It identifies and tracks the location and status of other Websense components. Stores configuration information specific to a single Policy Server instance. Communicates configuration data to Filtering Service, for use in filtering Internet requests.

     

    Service: Websense TRITON - Web Security

    This monitor returns CPU and memory usage of Websense TRITON Web Security. It response for configuration, management, and reporting interface to Websense software.

     

    Service: Websense TRITON Unified Security Center

    This monitor returns CPU and memory usage of Websense TRITON Unified Security Center. It is an application server for TRITON Unified Security Center.

     

    Service: Websense Information Service for Explorer

    This monitor returns CPU and memory usage of Websense Information Service for Explorer. Provides communication between Policy Server and other Websense components.

     

    TCP Port: Policy Server - Negotiate Encryption

    This component monitor tests the ability of Policy Server to accept incoming sessions by using negotiate encryption. By default it monitors TCP port 55807.

     

    TCP Port: Policy Server - Configuration Exchange

    This component monitor tests the ability of Policy Server to accept incoming sessions for configuration exchange. By default it monitors TCP port 55806.

     

    TCP Port: Network Agent

    This component monitor tests the ability of Network Agent to accept incoming sessions. By default it monitors TCP port 55811.

     

    TCP Port: Log Server

    This component monitor tests the ability of Log Server to accept incoming sessions. By default it monitors TCP port 55812.

     

    TCP Port: Triton Web Security

    This component monitor tests the ability of Triton Web Security to accept incoming sessions. By default it monitors TCP port 55824.


    TCP Port: Policy Broker

    This component monitor tests the ability of Policy Broker to accept incoming sessions. By default it monitors TCP port 55880.

     

    TCP Port: Explorer Information Service

    This component monitor tests the ability of Explorer Information Service to accept incoming sessions. By default it monitors TCP port 55818.

     

    TCP Port: Master Database

    This component monitor tests the ability of Master Database to accept incoming sessions. By default it monitors TCP port 80.

     

    TCP Port: SQL Server Communication

    This component monitor tests the ability of SQL Server Communication to accept incoming sessions. By default it monitors TCP port 1433.

     

    TCP Port: Logging Port

    This component monitor tests the ability of Logging Server to accept incoming sessions. By default it monitors TCP port 55805.

     

    TCP Port: Admin TRITON console

    This component monitor tests the ability of TRITON Admin console to accept incoming sessions. By default it monitors TCP port 9443.

     

    Warning and Errors Events: Websense Reporter Scheduler

    This monitor returns the number of Websense Reporter Scheduler warning and error events.

    Source Name: Websense Reporter Scheduler.

    Note: By default, this monitor is disabled.

     

    Warning and Errors Events: Websense EIM Server

    This monitor returns the number of Websense EIM Server warning and error events.

    Note: By default, this monitor is disabled. Before using this monitor you should provide correct Source Name: Websense EIM Server@IP  - where IP is the IP address of the Websense server.

     

    Warning and Errors Events: Websense Log Server

    This monitor returns the number of Websense Log Server warning and error events.

    Note: By default, this monitor is disabled. Before using this monitor you should provide correct Source Name: WebsenseLogServer@IP  - where IP is the IP address of the Websense server.

     

    Warning and Errors Events: Websense Network Agent

    This monitor returns the number of Websense Network Agent warning and error events.

    Note: By default, this monitor is disabled. Before using this monitor you should provide correct Source Name: Websense Network Agent@IP  - where IP is the IP address of the Websense server.

     

    Warning and Errors Events: Websense WF Report Server

    This monitor returns the number of Websense WF Report Server warning and error events.

    Note: By default, this monitor is disabled. Before using this monitor you should provide correct Source Name: WebsenseWFReportServer@IP  - where IP is the IP address of the Websense server.

     

    Warning and Errors Events: Websense Communication Agent

    This monitor returns the number of Websense Communication Agent warning and error events.

    Note: By default, this monitor is disabled. Before using this monitor you should provide correct Source Name: WebsenseCommunicationAgent@IP  - where IP is the IP address of the Websense server.

     

    Warning and Errors Events: Websense Policy Server

    This monitor returns the number of Websense Policy Server warning and error events.

    Note: By default, this monitor is disabled.

    Before using this monitor you should provide correct Source Name: WebsensePolicyServer@IP  - where IP is the IP address of the Websense server.

     

    Portions of this document are courtesy of Websense, copyright 2013
    http://www.websense.com/content/support/library/shared/v75/wsga_getting_started/wws_install.aspx
    http://www.websense.com/support/article/t-kbarticle/Websense-Web-Security-default-ports