There's no restriction to use FGT with Websense, since you'll only use the
web filtering feature. In fact, you can enable both and have a "who has
two, has one" situation: if it passes Websense, Fortigate might block it.
We run both, but squid talks to websense and we block at that point. I
have not found websense very stable on win2k3, in fact something has bad
issues. I am trying to determine why, before I move websense to RH
though...
Websense isn't very stable when it isn't the only way out to the net. In
personal tests, I found that what Steven described above is what seems to
be the best configuration to use with Websense.
Again personally, I don't trust Fortigate Web Filtering as a standalone
feature. If you aggregate FortiGuard, a subscripted service that acts as a
broker, "telling" what can be seen according to the rules you established,
then you'll have a nice feature. Althought Websense is the market leader
(at least in South America), I'd rather use both than rely in only one
point. After all, clock ticks doesn't cost anything, right?! :)
And yes, FGT can block Skype and Kazaa.
Regards
Thing
_____
From: Jared S. Brodsky [mailto:jsb@greatertalent.com]
Sent: Wednesday, 18 May 2005 3:47 a.m.
To: firewalls@securityfocus.com
Subject: Fortigate 100 w/ Websense
I currently have a Fortigate 100 unit and I am looking to use Websense
in my organization. Does anyone know if the Fortigate is compatible w/
Websense in the firewall mode?
--
Jared S. Brodsky
--
Leonardo Eloy, LPIC-1, FCSE, SCJP
Security Analyst
+55-85-3452.5733/5737
+55-85-8802.6740
leonardo@morphus.com.br
http://www.morphus.com.br
