Configuring Websense 7 software to ignore specific traffic from ISA 2006

To prevent filtering and logging of this traffic, add the user names, host names, and URLs that you do not want Websense software to filter to the isa_ignore.txt file.

1. On the ISA Server machine, open the isa_ignore.txt file in a text editor. This File is located in the WINDOWS\system32 directory.

2. Enter each user name, host name, or URL that you want Websense software to Ignore. Enter each item on its own line in the file, using the formats below.

􀂄 User name: Enter the name of a user whose Internet requests should not be filtered or logged by Websense software:

username=
Examples:
username=jsmith
username=domain1/jsmith

􀂄 Host name: Enter a destination host name that Websense software should not filter or log user visits to:

hostname=
Example:
hostname=yahoo.com

􀂄 URL: Enter a URL that Websense software should not filter or log user visits to:

url=
Example:
url=http://mail.yahoo.com/
url=mail.yahoo.com/

Then run a ISA debugging tool to check if the URL has been correctly recognized.

1. Open the file wsMSP.ini located in C:\Windows\system32 where the Websense ISAPI filter is installed.

2. Create a new section in the wsMSP.ini file called [diagnosticSection] with the following values:

[diagnosticSection]
ProgressTraceType=FileOnly
ProgressTraceMask=1
ProgressTraceFile=C:\Program Files\Websense\bin\wsISA.txt DumpUserNames=any

Note: Please change the security of the bin folder to be full controlled by everyone temporarily.

3. Stop then start the MSP/ISA Server Web Proxy which can be done through the MSP/ISA Manager. Restart Microsoft Firewall service in the service management console.

4. Browse the sites that you have added in the isa_ignore.txt file. A file called wsISA.txt will be generated in C:\Program Files\Websense\bin\ directory.

5. Please open this file to see if the URLs recorded are the same as you wrote in the isa_ignore.txt file, and if the file has taken effect.

Note: Please delete those lines in the wsMSP.ini file when you finish the test.

6. If the URLs in isa_ignore.txt file is correct, the following lines will be displayed in the isa debugging file:

OnPreprocHeaders: user: mvia: via: raddr:172.17.2.163 url:http://www.ibm.com/ meth:GET ver: HTTP/1.1 host:www.ibm.com userAgent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729) This url or hostname is ignored.