Deploying F5 Air Gap Egress Inspection with SSL Intercept with Websense® TRITON® AP-DATA Protector

Problem this snippet solves:

F5 Networks Air Gap Egress Inspection with SSL Intercept: Deploying F5 BIG-IP Local Traffic Manager with Websense® TRITON® AP-DATA Protector for Data Loss Prevention

Recommended Practices Guide

With F5 BIG-IP local traffic manager (LTM) and Air Gap Egress Inspection with SSL Intercept, performing deep inspection of SSL traffic flows with heterogeneous inspection technologies is possible. The Websense TRITON AP-DATA protector offers best-of-breed data loss prevention (DLP) content analysis and can be combined with other F5 product offerings to craft unique “inspection zone” use cases. The referenced guide outlines the configuration details required to integrate F5 BIG-IP LTM with the Websense protector.

This solution is used to deploy the Websense protector with an existing BIG-IP Air Gap Egress Inspection with SSL Intercept architecture.

• Use F5 BIG-IP LTM to provide SSL visibility to the protector.

• Use F5 BIG-IP LTM to scale the protector to desired capacity.

• Use F5 BIG-IP LTM to load balance multiple Websense protectors.

• Use F5 BIG-IP LTM to monitor the health of the Websense protector.

Please refer to the latest Air Gap Egress Inspection with SSL Intercept Deployment Guide and iApp for additional information. In addition, this recommended practices guide will enable you to complete the following tasks:

1. Configure the F5/Websense TRITON AP-DATA protector iApp.

2. Modify Air Gap Egress Inspection with SSL Intercept iApp configuration objects to successfully integrate the Websense protector.

Tested this on version: