|
Course Outline: Websense Web Security Training
Websense Certified Instructor : Tom Stansell
Topics:
Course Introduction: Websense Overview and Software Architecture
Installation and Deployment Part I
Websense Server Configuration
User Identification: Authentication and User Names
Working with Policies
Troubleshooting Part I
Websense Reporting Tools
Remote Filtering
Deployment Part II
Installation Part II
Advanced Administration
Troubleshooting Part II
Topic 1: Course Introduction: Websense Overview and Software Architecture
About Websense Inc. - Security Labs & Protection Services
Websense Product Overview
• Software - Key Features
• Reporting Tools
• Additional Features & Product Add-ons
Topic 2: Installation and Deployment Part I
Installation - Part I
• Pre-install Questions
• Hands-On Lab 2-1: Installing Websense Web Security Suite
Deployment - Part I
• Core Components
• Secondary Components
• Additional Deployment Notes
• Instructor-led Lab (iLab) 2-2: Websense Help & Documentation
Installing Websense Reporting Tools & Components
• Log Server
• Reporter
• Enterprise Explorer
• Database Administration
• Hands-On Lab 2-3: Installing Reporting Components
Topic 3: Websense Server Configuration
Websense Manager
• Menu Bar & Navigation Tree
• iLab 3-1: Websense Manager Menu Bar & Navigation Tree
• Websense Manager Content Pane: Policy Window, Category Set, Policy Set
• Hands-On Lab 3-2: Websense Server Configuration - Network Agent
• Websense Server Settings
• iLab 3-3: Customize Block Pages
• Starting & Stopping Websense Components
Topic 4: User Identification: Authentication and User Names
Introduction to User Identification
» Filter by Workstation & Global Policy
» Benefits of Filtering Users, Groups, and Domains
» Software Required for User Identification
• DirectoryService and Websense User Service
• Hands-On Lab 4-1: Setting up Active Directory Authentication
Difference Between Manual Authentication & Transparent Identification
Three Methods for Identifying Users
» Websense Integration Products
• Integrated Directory Service
» Websense Transparent (XID) Agents
• DC Agent (Windows Domains, both NTLM & LDAP protocols)
• Domain Controller Polling
• Workstation Polling
• Logon Agent (Local Machines)
• Group Policy Enabled
• Login/Logout Scripts
• eDirectory Agent (Identifies Novell eDirectory Logons)
• RADIUS Agent (Remote Authentication)
» Manual Authentication
Topic 5: Working with Policies
About Websense Filtering
» Filtering Defaults
• Initial Filtering
• Global Policy
• Editing the Global Policy
» Filtering Structures
• Category Sets
• Protocol Sets
» Filtering Options
• Basic Filters: Permit, Block, Quota Time, Continue
• Hands-On Lab 5-1: General Filtering
• Hands-On Lab 5-2: Quota Times
• Hands-On Lab 5-3: Password Override & Continue
• Advanced Filters: Keywords, File Types, Bandwidth Usage
• Hands-On Lab 5-4: Keywords & File Type Blocking
• Other Filters: Time of Day, Custom URLs, Yes Lists
• Hands-On Lab 5-5: Custom URLs
• Hands-On Lab 5-6: Yes Lists
• Protocol Filtering: Controlling Spyware, Malware, etc
• Hands-on Lab 5-7:
Configuring Protocol Sets and Creating Custom Sets
Working with Policies
» Creating Policies
» Modifying Policies
» Hands-On Lab 5-8: Configuring Protocol Sets and Creating Custom Sets
» Applying Policies
• Users & Groups
• Directory Structures & Organizational Units
• IP Addresses and Network Ranges
• Entire Network (Global)
Topic 6: Troubleshooting Part I
Troubleshooting Overview
Websense Troubleshooting Tools & Processes
Websense Diagnostic Tools
» TestLog Server
• Hands-On Lab 6-1: Troubleshooting Using TestLogServer
» Websense Ping
• Hands-On Lab 6-2: WebsensePing with Workstation IPs
» Block Page 'More Information' Link
• Hands-On Lab 6-3: More Information from Block Pages
• Console Client
• Hands-On Lab 6-4: Connecting ConsoleClient to DC Agent
Websense Component Service Debugging
• Network Agent
• User Service
• Hands-On Lab: 6-6 Debugging the User Service with dstrace
• Log Server
• Websense Explorer
• Websense Real-Time Analyzer
Miscellaneous Troubleshooting
Database Download Problems
Password Reset
Hands-On Labs: 6-7 Lab Pre-Work & 6-8 Password Reset
Using Error Logs
• Websense Log File
• Windows Event Viewer
Topic 7: Websense Reporting Tools
Websense Reporting Tools Overview
Reporting Tools Deployment & Architecture
Websense Reporting Components
» Websense Log Server
» Websense Log Database
» Websense Reporting Tools Portal
• Websense Real-Time Analyzer
• Websense Explorer
• Client Policy Manager Explorer
• Client Policy Manager Reporter
• Database Administration Tool
» Hands-On Lab 7-1: Websense Reporting Tools
Topic 8: Remote Filtering
About Remote Filtering
Remote Filtering Server
» iLab 8-1: Install Remote Filtering Server Service
Remote Filtering Client
» Hands-on Lab 8-2: Installing the Remote Filtering Client
» Hands-on Lab 8-3: Remote Filtering In Action
Topic 9: Deployment Part II
General Deployment Recommendations by Network Size
Hardware and Software
• Component Limits and Suggestions
• Network Agent Suggestions
• Filtering Services per Policy Server
• Deploying Transparent Identification Agents
Deploying Network Agent
Maximizing System Performance
• Network Agent
• Real-Time Analyzer
• HTTP Reporting
• Database Engine
• Log Database Disk Space Recommendations
Remote Filtering
Deploying in Networks Up to 10,000 Users
• Small Networks (1-500 users)
• Medium Networks (500 – 2,500 users)
• Large Networks (2,500 – 10,000 users)
Deploying in Networks with Over 10,000 Users
• Enterprise Networks (10,000 – 25,000 users)
• Very Large Enterprise Networks (25,000+)
Topic 10: Installation Part II
Upgrading from Previous Versions
• Supported Upgrade Versions
• Upgrade Path Recommendations
Backups
Component Upgrades
• Distributed Components
• Remote Filtering Components & Reporting Tools
Topic 11: Advanced Administration
Delegated and Remote Administration
» Managing Roles
» Administrative Roles
» Creating and Configuring Roles
» Hands-On Lab 11-1: Delegated Administration
» Hands-On Lab 11-2: Creating a Super Administrator
» Central Configuration Distribution
» Delegated Reporting
» Administrative Auditing and Logging
• Auditing
• SNMP Alerting
• Anonymous Logging
» Hands-On Lab 11-3: Remote Administration and Reporting
» Hands-On Lab 11-4: Delegated Reporting
Topic 12: Troubleshooting Part II
3rd Party Troubleshooting: Tools and Concepts
• Ethereal/Wireshark
• TCP View
• FileMon
• LDAP Browsers
• OS Commands
• Troubleshooting Remote Filtering Problems
|
