www.infralib.com

www.infralib.com
Please visit my new site http://www.infralib.com for my and other authors' newer posts, articles. We will also have forums, videos, webcasts and etc.
Showing posts with label Websense. Show all posts
Showing posts with label Websense. Show all posts

Wednesday, 28 December 2011

Websense Web Security Unblock / Recategorize not works

If you are using Websense Web Security 7.6 or newer and trying to allow a website by using unblock or recategorize features and if you are still not able to access to the website as I have experienced this behaviour with www.bugme not.com site, this is related to a new mechanism of force comes with 7.6 and newer versions. Because it continues to block the address if it is in a risky category, even you create an allow rule.

But you can override this feature by editing your eimserver.ini file

To do this open your eimserver.ini file add SecurityCategoryOverride=OFF under [FilteringManager]section and restart the filtering service.

For more details : http://www.websense.com/support/article/kbarticle/Custom-URLs-and-Limited-Access-Filters-Not-Permitting-Site-Access-In-V7-6

Another reason for this issue can be the role you've used to logon Triton console, be sure you use Super Administrator role or/and visit http://www.websense.com/support/article/kbarticle/Unblock-URL-feature-in-Websense-Manager-does-not-work for more information.

Friday, 2 December 2011

Windows Large MSI MSP Install Error 1718 Event 1008

I have experienced this problem while installing WebSense 7.6.2, if you are getting Error 1718. File FileName was rejected by digital signature policy as me, the root cause of it can be the large  .msi or .msp file you are trying to install. Additionally, the following event may be logged in Application Log.

Type: Error
Source: MsiInstaller
Category: None
Event ID: 1008
Date: Date
Time: Time
User: Na
Computer: ComputerName

Description: The installation of FileName is not permitted due to an error in software restriction policy processing. The object cannot be trusted.

This problem occurs if the Windows Installer process has insufficient contiguous virtual memory to verify that the .msi package or the .msp package is correctly signed.

If you are using Windows Server 2003 you can install the fix below.

Update for Windows Server 2003 (KB925336)
Update for Windows Server 2003, x64 Edition (KB925336)
Update for Windows Server 2003 for Itanium-based Systems (KB925336)

For more information and other solutions : http://support.microsoft.com/kb/925336