ForcepointWebsensePing

ForcepointWebsensePing

Details

Author

Andrea Garavaglia, Davide Arcuri - LDO-CERT

Version

1.0

License

AGPL-V3

Requires Registration

Yes

Requires Subscription

Yes

Free Subscription Available

No

DataType Supported

url, ip, domain, fqdn

Service Homepage

ForcepointWebsensePing

Description

Use ForcepointWebsensePing to determine which category a certain URL is assigned to.

Configuration

Name

Description

hostname

Forcepoint remote Filtering Service

timeout

WebsensePing timeout-secs

path

WebsensePing path

malicious_categories

List of Forcepoint categories to be considered as malicious

suspicious_categories

List of Forcepoint categories you would consider as suspicious

safe_categories

List of Forcepoint categories you would consider as safe

Requirements

You need a valid Forcepoint license to use the analyzer:

  • Install WebsensePing on instance where you will run this analyzer

  • Provide hostname of remote Filtering Service as a value for the hostname parameter and timeout as a value for the timeout parameter.