Simple name resolution caching from a pool of configured DNS resolvers
Informative error pages
Extended enforcement of SSL blocking through confirmation of Server Name Indication
The Websense support is delivered through use of a sideband connection over which we speak natively to a Websense server that's configured to run (at minimum) the Filtering Service. This iApp supports sending queries from the forward proxy VS to a pool of Websense servers.
The iApp is supplied with a complete help menu; make sure to read it thoroughly.