Many businesses and government institutions use a content filtering program such as Websense to keep employees from visiting certain websites while at work. These programs can either prohibit the use of certain websites or monitor all of the sites that employees visit while in the office. Websense blocks several website categories: adult material, entertainment, drugs, games, sports, Internet communication, peer-to-peer file sharing, gambling, instant messaging, health, illegal, shopping, job search, Internet telephony, religion, special events, travel, violence, weapons, advertisements, freeware and software download, pay-to-surf, malicious websites, and many more.
The concept behind Websense is simple, whenever an employee attempts to visit a specific webpage, a request is generated and then passes through a firewall. Websense looks at this request and answers yes or no depending on if the requested URL is in the Websense database. In transparent mode, Websense counts on the fact that the firewall forwards the whole request one time. If the whole request is not transferred at one time, Websense allows the packet to pass, as the packet does not look like an HTTP request. Several techniques allow users to bypass Websense’s filtering and authentication process.
Bypassing Websense via a Web Proxy
One way to bypass Websense is to use a web-based proxy site. With a proxy, Websense sees the user browse to the web proxy, not to the website the user is actually browsing to. The user browses to the web proxy and the web proxy browses to the website that the user wants to visit. These web proxies can bypass Websense because the ‘S’ in the HTTP address (https://) stands for secure connection and Websense does not block such secured connections. This is probably the simplest way to get around the Websense program as it takes little time and no one will wonder what the user is up to.
To find a current web proxy, visit our proxy page.
Bypassing Websense via HTTP Tunneling
Users can also bypass Websense via HTTP Tunneling. Most programs also come with options that help to destroy Internet history and Widows activity. This means that the user’s online activities are secure and he/she can spoof his/her web browser information, which helps to thwart hacking missions. One can download HTTP Tunneling software programs from the Internet quite easily and inexpensively.