|Applies To||RSA Security Analytics|
Websense Web Security
|Issue||Websense categories are shown as numbers rather than names in RSA Security Analytics.|
Websense Alerts only contain category numbers in RSA Security Analytics.
1) Create a CSV file to map the Category Numbers to Category Names. You can obtain the basis for this information at http://www.websense.com/content/support/library/web/v76/siem/siem.pdf#page=30
A sample list has been created here, but this comes with no warranty about it accuracy: WEBSENSE.CSV
An example feed in 10.3.4 looks as follows:
a) The index type should be Non IP
b) The Callback Key(s) should be category as this is what we are matching on. The index is column 1 in the csv file.
c) We add the Websense Category name catgeory with the results from column 2 in the csv file.
This will result in both the Websense Category Number and the Websense Category Name being written to the Category field. A separate custom meta key could be configure so that the Websense Category Names are just stored in this custom meta key.
|Legacy Article ID||a67771|