Hot Downloads

Welcome, Guest
Username: Password: Remember me

TOPIC: Best config for IPS 4215, Pix515e and websense

Best config for IPS 4215, Pix515e and websense 10 years 2 weeks ago #17291

  • psiclonius
  • psiclonius's Avatar
  • Offline
  • Frequent Member
  • Posts: 34
  • Karma: 0
Hey Everyone,

I have purchase a quad ethernet adapter for the IPS 4215 sensor and was planning to configure an in-line setup between my Pix 515e and 2620 router. We are also evaluating Websense 6.2 as a content filter. What is the best configuration for these products:

IPS 4125
Pix 515e
2620 Router

Will an in-line config on my IPS 4215 still work if websense need to see all traffic from my pix?

The administrator has disabled public write access.

Re: Best config for IPS 4215, Pix515e and websense 10 years 2 weeks ago #17304

  • Smurf
  • Smurf's Avatar
  • Offline
  • Moderator
  • Posts: 1390
  • Karma: 1
Sorry but not really had many dealings with the IPS apart from when i did the CCSP, then it was IDS and the changes with the appliances doing In-Line was not around (just bought one so i am hoping to get to play with it soon).

Anyhow, as far as i know, using the appliance In-Line should not affact anything with the Websense/Firewall as it should just be passing on all the traffic through the device (thats how i understand it). Obviously if the appliance detects attack traffic (or worms, etc..) depending on how you configured it then this traffic can then be blocked.

I would also wait until Websense Version 6.3 is out (end of the month i beleive) its probably best to test with the latest and greatest build. They have now re-introduced the Google SafeSearch option (which was added in version 5.5 and then removed in version 6) which is a cracking option to stop google searches from bringing back undesirable content.

I have tested it with google images and entered porn as a search term and didn't get any pornographic images back (which is good in my environment which deals with kids).

Hope it helps but thats about all i know on this one.

Wayne Murphy Team Member

Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit or PM me for details.
The administrator has disabled public write access.
Time to create page: 0.072 seconds


Cisco Routers

  • SSL WebVPN
  • Securing Routers
  • Policy Based Routing
  • Router on-a-Stick

VPN Security

  • Understand DMVPN
  • GRE/IPSec Configuration
  • Site-to-Site IPSec VPN
  • IPSec Modes

Cisco Help

  • VPN Client Windows 8
  • VPN Client Windows 7
  • CCP Display Problem
  • Cisco Support App.

Windows 2012

  • New Features
  • Licensing
  • Hyper-V / VDI
  • Install Hyper-V


  • File Permissions
  • Webmin
  • Groups - Users
  • Samba Setup