Results 1 to 9 of 9

Hi guys, We are using BES 4.1 and websence, since we update from BES 3.6 ... Server Admins forum

  1. #1
    moffet's Avatar
    moffet no está en línea Stack level 1
    Join Date
    Aug 2007
    Posts
    8

    Question BES 4.1 and Websense

    Advertisement



    Hi guys,

    We are using BES 4.1 and websence, since we update from BES 3.6 our "magnific" websense is poping every user for authentification if the windows session where our BES's located is close.

    I know we are using BES server services account to authentificate the user to the web server and by the same time the "super fun" websense.

    I'm looking to kill this authentification box, why "my friend" websense can see that it's the bes services account?!

    I'm not even sure if it's a BES issue or a "beautiful" websense issue....

    Thanks for reading at least typing this put my frustration down....

  2. #2
    PacketRat's Avatar
    PacketRat no está en línea BES Pro
    Join Date
    Feb 2006
    PIN/ID
    26267461
    Posts
    374

    Re: BES 4.1 and Websense

    Can you put a rule in websense to allow all access out for the BES IP address?
    -------
    PacketRat
    8330,8900,9630
    258CDFE8




  3. #3
    moffet's Avatar
    moffet no está en línea Stack level 1
    Join Date
    Aug 2007
    Posts
    8

    Re: BES 4.1 and Websense

    No that's going to be a rule in the firewall for bypassing traffic on port 80 for the BES ip address, but we dont want that, because people will start surfing their porn aka viruses with bb... thanks

  4. #4
    PacketRat's Avatar
    PacketRat no está en línea BES Pro
    Join Date
    Feb 2006
    PIN/ID
    26267461
    Posts
    374

    Re: BES 4.1 and Websense

    You can put a username and password in the mds settings if you don't want your users prompted. Its under the Blackberry MDS connection Service then Proxy. We have offices with Firewall holes for BES and a few offices that are using a proxy(bluecoat) with a rule for access out. The bluecoat will prompt unless you put a username and password in the proxy settings for the MDS service. Hope that helps.
    -------
    PacketRat
    8330,8900,9630
    258CDFE8




  5. #5
    gtox's Avatar
    gtox no está en línea Stack level 2
    Join Date
    Jun 2007
    Posts
    60

    Re: BES 4.1 and Websense

    ~via BB (wap.pinstack.com)~you can't white list tje bes user?

  6. #6
    moffet's Avatar
    moffet no está en línea Stack level 1
    Join Date
    Aug 2007
    Posts
    8

    Re: BES 4.1 and Websense

    HI PacketRat, thanks for your reply,

    Unfortunatly Websense is not a proxy, I already thought about adding the credential in the proxy settings, but you can't save without providing a proxy URL... so we can't use this feature!

    gtox: No bes user authentificate with the BES service account too our websense that's how it work when you have a MDS server... it always use BES service account, unless you specify user/pass for proxy.

    Thanks...

  7. #7
    moffet's Avatar
    moffet no está en línea Stack level 1
    Join Date
    Aug 2007
    Posts
    8

    Re: BES 4.1 and Websense

    BUMP!! No websense expert in the place?!

  8. #8
    zukutu's Avatar
    zukutu no está en línea Stack level 2
    Join Date
    Sep 2006
    Posts
    32

    Re: BES 4.1 and Websense

    First of all, what kind of virus that will infected the BB anyway....!?!?

    Create a new policy on websense that allow everything but porn or anything that you want to block. Add that policy to the IP address of your BB server and username that used to manage your BB server (this is on the websense).

    It is working well between my websense and my BB server =)

    --Zu

  9. #9
    moffet's Avatar
    moffet no está en línea Stack level 1
    Join Date
    Aug 2007
    Posts
    8

    Re: BES 4.1 and Websense

    Thanks for your quick reply, I will try this afternoon, I will let you know!

    Thanks

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •