How can I receive Internet activity logs from Websense?

[RSAAdmin]

I have Websense web security 7.5 I configured SNMP to Envision server. I just receive SNMP from alerts. Nothing comes in the database. Do I have to read in the database directly with ODBC? Will Envision be able to parse correctly?

[NathanFurze1]

Are you referencing our configuration guide on SecureCare Online? If not it has instructions for either SNMP or ODBC collection. Offhand I don't know if the data is the same with either collection method but we added ODBC collection because there was a daily limit on the number of SNMP messages that could be sent from the Websense product. Customers were hitting that maximum SNMP limit and not capturing all the data. Nathan

[NathanFurze1]

From Content Engineering --------- Websense WebSecurity can send System alerts and Usage alerts via SNMP. Here’s a link that describes the different kinds of alerts websense websecurity is capable of sending and how these alerts can be configured http://www.websense.com/content/support/library/web/v76/siem/siem.pdf The Websense Log database stores the records of internet activity and the associated web filtering actions, which we collect through an ODBC connection to the database. ---------- Nathan

[RSAAdmin]

Thanks. I used the SNMP method. now, the guide changed with ODBC capability, I'll try it

[RSAAdmin]

ODBC can support version 7.5? or just 6.3 through 7.0

[NathanFurze1]

We have only tested on 6.3 - 7.0 and are working with Websense now to test on more recent versions but it is our understanding the the ODBC query is working against version 7.6. Qualification of this will be released in an upcoming ESU. Nathan