Websense Triton Security Gateway Anywhere review

Reviews 5 Jul, 2011

Websense's TSGA claims to be the first unified solution for web, mail and data security that doesn’t rely on any third party components. It goes even further by amalgamating on-premises and cloud scanning in the same product, but is it too good to be true? Dave Mitchell finds out in our review.

5
Price: 
£12650
for v10000 appliance; 1year full TSGA subscription for 2,000 users, £35.73 per user. All ex VAT
Verdict: 
Mid-sized business and enterprises looking for a single appliance to take care of all their network security needs will find Websense’s TSGA ideal as it combines a remarkable range of web, mail and data security features with excellent performance. Websense’s TruHybrid is compelling with both the on-premises and SaaS cloud services seamlessly integrated into the well designed central management console.

Most UTM products use one or more third-party components for essential tasks such as web content filtering, anti-spam or virus scanning but Websense’s latest Triton Security Gateway Anywhere (TSGA) is completely home grown. It only uses technology which the company has either developed itself or acquired over the years.

TSGA benefits from Websense’s innovative TruHybrid service which combines both on-premises and SaaS cloud services for web content and email scanning.

TSGA benefits from Websense’s innovative TruHybrid service which combines both on-premises and SaaS cloud services for web content and email scanning. This allows businesses to deploy appliance-based scanning at the head office and use the SaaS component to extend the same levels of data security to branch offices and remote workers.

Competing products only offer either on-premises or cloud scanning and generally rely on third party vendors to provide these services. Uniquely, both TruHybrid components are managed from the same management console and can be configured using a single security policy.

TSGA has a wide range of options that can be purchased separately and the v10000 appliance on review runs everything on one platform. The appliance is based on a good quality Dell PowerEdge R610 server with enough grunt to handle all security services for up to 2,500 users.

To test the v10000 appliance we slotted it into the lab network which had Dell PowerEdge servers running Windows Server 2008 R2 domain and internal email services. Windows 7 clients were configured to use the appliance as their proxy and to test the email DLP (date leakage prevention) feature we added another server providing external mail services.

All management is via the intuitive Unified Security Center (USC) web interface which uses three separate tabs for the web, data and email components. Customisable dashboards are provided with each one showing details such as detected security risks, threats, viruses and so on.

Specifications: 

Chassis: 1U Dell PowerEdge R610 rack server

CPU: Dual quad-core Xeons

Memory: 24GB DDR3

Storage: 2 x mirrored 10K 300GB SAS SFF (data/logging), 2 x mirrored 146GB SAS SFF (cache)

RAID: Dell PERC 6/i

Network: 6 x Gigabit Ethernet

Power: 2 x 270W redundant hot-plug power supplies

Management: Web browser