Installation Checklist

Websense Client Policy ManagerTM Websense Web Security Suite Lockdown EditionTM - including Corporate Edition
This checklist is designed to help you plan your installation of Websense Client Policy Manager (CPM) v6.3 and Websense Web Security Suite Lockdown Edition v6.3. You may find it helpful to print this document to use as a reference guide as you perform the installation. This can be especially useful if you are deploying components to multiple machines. All references to procedures for CPM in this document also apply to the Web Security Suite Lockdown Edition. For specific installation and configuration procedures, refer to the Websense Client Policy Manager Installation Guide, which is available at http://www.websense.com/global/en/SupportAndKB/ ProductDocumentation/. For additional topics that may not appear in the Installation Guide, check the Websense Knowledge Base, available at http://www.websense.com/global/en/SupportAndKB/SearchKB.

1. Network prerequisites
The following preparations must be made prior to installing Websense Client Policy Manager. Microsoft SQL Server: An SQL Database Server must be installed before you begin installing CPM components. The database stores inventories, launch activities, and network activity for CPM Server and the reporting tools. CPM databases support Microsoft SQL Server 2000, Service Pack 3a and Service Pack 4 and Microsoft SQL Server 2005. Directory service: If you are using a directory service, such as Active Directory or Novell eDirectory, to identify users, the directory service must be installed and configured properly. Web server: CPM Reporting Tools require either Microsoft IIS (v5.0 or v6.0) or Apache (v2.x or higher). The CPM installation package provides a link to the Apache installer at http://httpd.apache.org/download.cgi. If you choose to install Apache from Websense Setup, you must exit the Websense installer. After Apache has been successfully installed, run Websense Setup again to complete the installation of CPM. Adobe Acrobat or Acrobat Reader: The product documentation that is installed with CPM is in PDF format. You must have Adobe Acrobat or Acrobat Reader installed to view this documentation. Internet access: For the Websense Master Database to download during installation, the installation machine must have internet access to the download servers at the following URLs. download.websense.com ddsdom.websense.com ddsint.websense.com portal.websense.com my.websense.com

2. CPM component distribution

Decide how you are going to deploy CPM components. Choose one of the following deployments: Stand-alone: all components on one machine. This configuration is recommended for networks with 500 or fewer users. For recommended hardware requirements, refer to Single machine CPM installation. Distributed: components distributed on separate machines in your network. For recommended hardware requirements for each component, refer to Multiple machine installation. Shared: sharing components with the Websense Enterprise Web filtering module. For recommended hardware requirements for each component, refer to Multiple machine installation.

IMPORTANT
Do not deploy Client Agent to the machine running CPM Server, CPM Reporter or CPM Explorer. To do so, can compromise CPM processes.

Websense Client Policy Manager

1

Installation Checklist

Installation Checklist

3. Hardware requirements
Make sure machines on which you are installing CPM components and Client Agent meet recommended hardware requirements. If they do not, CPM operations will not work.

Single machine CPM installation

If you are installing all CPM components on a single machine, make sure your machine has the following capabilities: Processor: Pentium 4 or better Memory: 1 GB RAM (minimum), 2 GB recommended when SQL Server is installed on the same machine Disk Space: 247 MB for installation Monitor: 800 x 600 or higher resolution, with at least 256 colors (required to view any report)

IMPORTANT
If you install CPM on the SQL Server machine, you must have ample disk space for the database to grow. This can happen very quickly in networks with high activity.

Multiple machine installation

If you are deploying components on multiple machines, make sure that you meet the recommended hardware requirement for each component you are installing. If you are installing more than one component on a single machine, the machine must meet or exceed recommended hardware requirements for the component.

CPM Server
Processor: Pentium 4 or better Disk Space: 14 MB for installation 150 MB of working space for the CPM application database Memory: 1 GB RAM or more

CPM Reporter and Explorer for CPM

Processor: Pentium 4 or better Disk Space: 97 MB for installation Memory: 1 GB RAM or more Monitor: 800 x 600 or higher resolution, with at least 256 colors (required to view any report)

CPM Deployment Service

Processor: Pentium 4 or better Disk Space: 12.1 MB for installation Memory: 512 MB or greater

Websense Client Policy Manager

2

Installation Checklist

Installation Checklist

4. Operating system requirements

Each machine on which you install the full CPM suite, or any individual component, must run one of the following operating systems as indicated. All machines must be on TCP/IP-based networks. If your network uses both TCP/ IP and non-TCP protocols, CPM will filter only those users on the TCP/IP portion of your network.

CPM Server, CPM Report Scheduler, and CPM Deployment Service

Microsoft Windows 2000 Server, Service Pack 3 or higher Microsoft Windows Server 2003 Service Pack 1

Client Agent
Microsoft Windows 2000 Professional, Server, or Advanced Server with Service Pack 3 or higher Microsoft Windows 2000 Server Service Pack 3 or higher Microsoft Windows Server 2003 Service Pack 1 Microsoft Windows XP Professional, Service Pack 1 and higher

5. Client Agent and anti-virus/personal firewall compatibility

If anti-virus applications and firewalls are not compatible with Client Agent installations, CPM processes will not operate properly, if at all. Make sure that each machine on which you plan to deploy Client Agent is running compatible anti-virus software packages and/or personal firewalls.

Anti-Virus applications supported

Network Associates McAfee Anti Virus 7.0 and 8.0 Norton/Symantec Anti Virus Corporate Edition 8.1 and 9.0 F-Secure Anti Virus 5.55 Norman Data Defense 5.7.0

Anti-Virus and personal firewall suites

Panda Business Secure Titanium 2005 EZ Armor 2005 Zone Alarm Security Suite 2005

Spyware protection
Spybot Ad-ware PestPatrol Spy Sweeper

Personal firewalls supported

Sygate Network Associates Black Ice 2.11 and 3.6

6. Information required during installation

During the actual installation process, you will be required to provide information that will establish communications, make database connections, and more. It is helpful to have this information ready before you start.

Policy Server location

You will need the Policy Server name or IP address and port information if you are installing components on multiple machines, or if you intend to connect to a Policy Server that was installed with the Websense Enterprise web filtering module. You will also need Policy Server information if you deploy Client Agent manually or with a script. Policy Server machine name or IP address ______________________ Port ____________

Websense Client Policy Manager

3

Installation Checklist

Installation Checklist

Subscription key
If you have a valid Websense subscription key, you can enter it during installation, and Setup will automatically download the Websense Master Database. If you wait until later, you must enter this key in the Websense Manager to download the database. Subscription key ____________________________________

IIS virtual directory

Enter the name of the Web site in Microsoft IIS where the virtual directory should be installed, if it is different from the Default Website. This is necessary only if you are installing the CPM Reporting Tools. Name ____________________________

Windows trusted connection

If you select to use a Windows trusted connection to access the database you must provide logon information for an account that has SQL Server administrator rights to configure the database. Domain\User name _____________________ Password _____________________

Database location
Provide the IP address or machine name of the computer where the SQL Server database engine is installed. Database Location ______________________

SQL database access account

To ensure secure communications, you will need the following SQL database authentication information. Database User Name _____________________ Password _____________________

CPM Deployment Service domain administrator credentials

If you are installing Client Deployment Service, or if you are deploying Client Agent by scripts, you must provide access information for the domain: Domain\User name _____________________ Password _____________________

CPM Server communication port

CPM Server uses the communications port to communicate with Client Agent. The default setting is port 80 for HTTP, non-SSL communications. Often, this port is used by Web Servers. If this is the case for your installation, you must select an alternate port that your organization does not currently use. Communications port ____________

Encryption pass phrase

CPM Server and Client Agent use an encryption pass phrase during installation to ensure secure communications. This passphrase is also used when configuring the Client Agent to communicate with the Remote Filtering Server in the web filtering module. Pass phrase ______________________

Websense Client Policy Manager

4

Installation Checklist