Please see the Knowledge Base article
Error upgrading when STEMLog transaction log spanned multiple physical files
The "Search base" field for LDAP connections had a 44 character limit
The full SSL Certificate Chain was not presented when TLS was enabled
"Exceeded maximum file size" (552) error resulted in "system too busy" (421) error
Reputation/DNS Blacklist exclusion list ignored with True Source IP
Not all recipients received message when True Source IP detection and Blacklist used
Rules Service hung and did not process messages
Corrupted image could cause Rules Service termination
Document decomposition corrupted the file attachment
STEMRules crash - faulting module scCSFFramework.dll
Misidentified drawing files (.dwf) triggered "Executable rule"
Rule created with a group of domains imported from ScoutGroupDB did not work
Header Modification Object string match case sensitivity option
Inbound/Outbound Object display incorrect
LDAP Rules based on AD distribution group did not work
LexiMatch "NEAR distance" was global across all LexiMatch rules
Notifications appeared to be sent to all recipients
Send Service did not send QUIT command after 4xx response
No notification if outbound message is delayed (requeued)
Space after colon in "mail from: <address>" not RFC compliant
Web Administrator service terminated or hung
Saving search results caused error in Message Administrator with large STEMLog
After moving messages to another machine, Message search gave inaccurate results
Messages deleted from QueueView did not get updated status in Message Search
Character limit on "To" field when the Find function was used with a log or queue
Multiple Transaction Log files caused the scheduled STEMLog Archive task to fail
Archive action failed when "Archive data from the Last 24 Hours" selected
After upgrade from SEF v5.2 to SEF v6.0 SP1, PEM notification processing looped
Message header not modified with PEM "Always Allowed" processing
Personal Email Manager: Always Allowed and Always Deleted did not work with subdomains
Windows cannot open 32-bit extensible counter DLL Websense Email Security in a 64-bit environment
Sorting messages in Message Administrator by the 'To' column returns an empty list
Message Search or selecting a queue or log returns no results
Multiple Heuristics Scanning rules do not catch as much spam as a single rule
Timeout expired error purging Friendly Name database
System DSNs do not appear in Data Sources (ODBC) in Windows 2003 Server x64 Edition
Version 6.1 Service Pack 1 (SP1) is a maintenance release that includes several important product corrections.
Additional product information and resources, including Websense Email Security downloads, knowledge base articles, and technical assistance are available at
The following products and versions are supported by Websense Email Security v6.1 SP1:
To download Service Pack 1 go to www.websense.com/SupportPortal/. In the "Support by Product" area, click Websense Email Security and select Service Pack 1 from the list. Save the download file to a location on the server.
To install SP1, double-click on the executable file and follow the instructions.
There are no post installation steps to perform.
SP1 will not install on a machine that does not have Websense Email Security v6.1.
The following issues have been corrected in Websense Email Security v6.1 SP1:
There was no problem with support of LDAP over SSL, but to make its configuration clearer there is a new knowledge base article. Please see article
An "exceeded maximum file size" error (552) left the system in a state that later caused "system too busy" (421) errors. This problem has been corrected.
If the server was set up to use True Source IP to check against Reputation/DNS Blacklist, the exclusion list was ignored. This problem has been corrected.
The Rules Service appeared to be in the "Started" state but no email was being processed by the system. Email was received by the Receive Service and messages were in the IN folder, but the Rules Service was not processing them. This problem has been corrected.
Sometimes when an email containing corrupted images was processed by the Rules Service, the service crashed leaving a BAD file in the IN folder. This problem has been corrected.
A problem in document decomposition processing corrupted the message attachment and caused the Rules Service to restart. This problem has been corrected.
The Rules Service occasionally crashed with a "faulting module scCSFFramework.dll" error. This problem has been corrected.
".dwf" drawing files were sometimes misidentified as ".exe" files, triggering the "Executable rule". This problem has been corrected.
A rule created using a group of domains imported from a ScoutGroupDB failed to isolate messages for members of the group. This problem has been corrected.
In the Header Modification Object, string matching has always been case sensitive. SP1 allows you to choose whether string matching is case sensitive. A Match case check box has been added to the Edit Header Modification dialog. The short-cut key is Ctrl+M. It is selected (enabled) by default, preserving historical behavior.
When an Inbound/Outbound Object had everything checked except Inbound or Outbound and the user clicked OK, the resulting display was incorrect. This problem has been corrected.
LDAP Rules based on an AD distribution did not have an email address assigned. This problem has been corrected.
The NEAR distance value in a LexiMatch rule was incorrectly used as a global value for all LexiMatch rules. This problem has been corrected. A NEAR distance value only applies to the rule in which it is specified.
If notify PI was used to send notifications to recipients, when the recipients received the notification, the To: line made it look like notifications were also sent to external recipients. Although external recipients were listed, they were not sent notifications. This problem has been corrected.
The Send Service did not send the RFC specified QUIT command to end the connection to a receiving server after receiving a 4xx response. The Send Service is now RFC compliant and also gracefully handles other servers that are not.
Websense Email Security did not send a notification to the sender when an outbound message was requeued (delayed). The sender was notified only when a delivery failure occurred, which could occur after several days. Users have asked for a delayed notification option.
Websense Email Security can now be configured to send a notification to the sender when an outbound message is requeued (delayed). To set the option, in the Monitor select: Server Configure > ReQueuing Scheme . Check Notify Sender After and adjust the value for retries .
If the STEMLog was large (>1 GB), when the Administrator performed a Search in Message Administrator and then attempted to save the results, the action sometimes terminated with a timeout error. This problem has been corrected.
When messages were moved to another machine (for example to upgrade the WES host) and existing messages were copied to the new machine, the creation date of the messages changed as a result of the file copy. Subsequent use of Message Search returned unexpected results because the file creation dates had changed. Message Search now uses the file modification date, instead. The file modification date indicates when the message was isolated. It does not change when messages are copied to a new location.
When a message was deleted from QueueView the message status was not updated in Message Search. This problem has been corrected.
The Archive task terminated abnormally when there were multiple transaction files for STEMLog. This problem has been corrected.
After upgrading from SEF v5.2 to SEF v6.0 SP1, when Personal Email Manager processed pending messages it got stuck in a loop and sent notifications for the blocked messages over and over again. This problem has been corrected.
When a message was isolated and later allowed by Personal Email Manager "Always Allowed" processing, the message header did not indicate that Websense Email Security had processed the message. This problem has been corrected.
Websense Email Security v6.1 has the following known issues:
When attempting to add the Websense Email Security performance counter in the 64-bit edition of Windows 2003 server, Websense Email Security is not listed in the list of performance objects. This is because Websense Email Security is a 32-bit application and its performance counters cannot be monitored by the 64-bit performance monitor. You can, however, add the Websense Email Security performance counter to the 32-bit version of Performance Monitor provided in Windows 2003 server x64 Edition. To start the 32-bit version of Performance Monitor:
See knowledge base article
When there are a large number of messages to sort and the messages have many recipients, the SQL requests submitted to the log database may take a long time to run. The time taken may exceed the maximum allowed, resulting in a timeout that causes an empty list to be displayed.
The problem can be alleviated or worked around with the following strategies:
See knowledge base article
In Message Administrator, when performing Message Search or selecting a queue or log to view, no results are returned after waiting for a period of time. This can happen when the size and number of records in the STEMLog database is large, which causes the query to the database to timeout before results are returned.
The best solution is to reduce the size of the STEMLog database. See the Database Tools section of the Websense Email Security Administrator's Guide.
See knowledge base article
This can result if all of the following conditions are met:
To fix this problem, set all Anti-Spam Agent - Heuristics plug-ins to use the Full scan of message header and body option.
See knowledge base article
In the Windows Event Viewer, an event is generated by Websense Email Security with the following error message:
Error purging friendly name database: ADO Error: [Microsoft][ODBC SQL Server Driver]Timeout expired.
This error indicates that the Friendly Name database is too large to complete purging before reaching the default timeout limit.
See knowledge base article
In Windows 2003 Server x64 Edition, when you open Data Sources (ODBC) from Control Panel -> Administrative Tools and click on the System DSN tab, none of the Websense Email Security System DSNs can be found. This is because Control Panel -> Administrative Tools opens the 64-bit version of Data Sources (ODBC) and Websense Email Security is a 32-bit application and its System DSNs are created in the 32-bit version of Data Sources (ODBC).
When you need to make changes to the System DSNs, open the 32-bit version of Data Sources (ODBC):
<WINDOWS>\SysWow64\odbcad32.exe
See knowledge base article
Technical information about Websense software and services is available 24 hours a day at:
For additional questions, fill out the online support form at:
If your issue is urgent, please call one of the offices listed below. You will be routed to the first available technician, who will gladly assist you.
Websense, Inc., provides software solutions that integrate with your existing environment. In the complex environments that are common in today's marketplace, this involves interacting with a variety of third-party software products. In some cases, Websense, Inc., makes an effort to simplify the acquisition of this third-party software. However, you must obtain any upgrades and enhancements to those products directly from the third-party vendor.
If you have questions, contact Websense Technical Support for additional information.
©1996-2008, Websense, Inc. All rights reserved.
Published May 20, 2008 4:25 pm
Websense and Websense Enterprise are registered trademarks of Websense, Inc., in the United States and certain international markets. Websense has numerous other unregistered trademarks in the United States and internationally. All other trademarks are the property of their respective owners.
IMPORTANT - THIS SOFTWARE IS PROVIDED ONLY ON THE CONDITION THAT THE SUBSCRIBER (REFERRED TO IN THIS AGREEMENT AS "SUBSCRIBER") AGREES TO THE TERMS AND CONDITIONS SET FORTH IN THE FOLLOWING LEGAL AGREEMENT BY WEBSENSE, INC. AND/OR ONE OF ITS SUBSIDIARIES (REFERRED TO IN THIS AGREEMENT AS "WEBSENSE"). READ THIS AGREEMENT CAREFULLY BEFORE ACCEPTING IT. By clicking on the "I Agree" button below or by using the Software, YOU ACKNOWLEDGE THAT YOU HAVE READ THIS AGREEMENT AND UNDERSTAND IT, AND YOU, ON BEHALF OF YOURSELF OR THE SUBSCRIBER, IF THE SUBSCRIBER IS A BUSINESS, AGREE TO BE BOUND BY ITS TERMS AND CONDITIONS.
1. Subscription and Grant of Right to Use
Subject to the terms and conditions set out in this Agreement, Websense agrees to provide the Subscriber the subscription services ("Subscription") as described in the purchase commitment mutually agreed upon between the parties ("Order"). Websense grants to the Subscriber as part of the Subscription a non-exclusive, nontransferable right to use certain proprietary software applications ("Software"), proprietary database(s) of URL addresses, applications and other valuable information ("Databases"), changes to the content of the Databases ("Database Updates") and certain modifications or revisions to the Software ("Software Upgrades"), together with applicable documentation and the accompanying media, if any, (collectively, the "Products"). The Products are provided for the number of Seats or servers for use in Subscriber's own internal business operations (not for the benefit of any other person or entity) for the time period set forth herein or in the applicable Order ("Subscription Term"), provided the Subscriber has and continues to pay the applicable fees for the Products ("Subscription Fees"). Subject to compliance with the terms of this Agreement, Subscriber may relocate or transfer the Product for use on a different server within its location. All fees paid for the Products are nonrefundable. "Seat" means each computer, electronic appliance or device that is authorized to access or use the Products, directly or indirectly. Subscriber may exceed the number of ordered Seats only upon payment of additional Subscription Fees. Websense may, at any time, audit the use of the Products remotely or, upon reasonable notice, at the Subscriber's site. Unless specifically authorized in writing in advance by Websense, the Subscriber may not rent, lease or timeshare the Products or provide subscription services for the Products or permit others to do so. Any source code provided to the Subscriber by Websense is subject to the terms of this Agreement. Subject to the terms of this Agreement, the Subscriber may allow its agents and independent contractors to use the Products solely for the benefit of the Subscriber; provided, however the Subscriber remains responsible for any breach of this Agreement. Any other use of the Products by any person, business, corporation, government organization or any other entity is strictly forbidden and is a violation of this Agreement. Evaluation copies of the Products are provided for use by the Subscriber only for evaluation purposes to facilitate Subscriber's subscription decision for up to thirty (30) days unless otherwise authorized in writing by Websense. At the end of such thirty (30) day period, the Subscriber must pay the applicable Subscription Fees or this Agreement will automatically terminate and the Subscriber must comply with the terms of Section 7 below.
Websense provides its standard technical support for Subscriptions to Products pursuant to the terms of this Agreement. Enhanced support offerings and services are available for additional cost and are also subject to the terms of this Agreement. As part of its standard technical support, WEBSENSE regularly makes available Database Updates and Software Upgrades. WEBSENSE may require Subscriber to install Software Upgrades up to and including the latest release. Database Updates and Software Upgrades will be provided to Subscriber only if Subscriber has paid the appropriate Subscription Fee for Subscriber's Seats and/or Subscriber's servers.
3. Intellectual Property Rights
The Products and all intellectual property rights therein and related thereto are the sole and exclusive property of Websense and any third party from whom Websense has licensed software for incorporation in or distribution with the Products. All right, title and interest in and to the Products and any modifications, translations, or derivatives thereof, even if unauthorized, and all applicable rights in patents, copyrights, trade secrets, trademarks and all intellectual property rights in the same shall remain exclusively with Websense and its licensors. The Products provided hereunder are valuable, proprietary, and unique, and Subscriber agrees to be bound by and observe the proprietary nature thereof. The Products contain material that is protected by patent, copyright and trade secret law, and by international treaty provisions. The Subscriber may make a sufficient number of copies of the Software for its authorized use and make one (1) copy of the Software for backup purposes only. The Subscriber may not remove any proprietary notice of Websense or any third party from any copy of the Products. All rights not granted to the Subscriber in this Agreement are reserved to Websense. No ownership of the Products passes to the Subscriber. Websense may make changes to the Products at any time without notice. Except as otherwise expressly provided, Websense grants no express or implied right under Websense patents, copyrights, trademarks, or other intellectual property rights.
4. Protection and Restrictions
The Subscriber agrees to take all reasonable steps to safeguard the Products to ensure that no unauthorized person shall have access thereto and that no unauthorized copy, publication, disclosure or distribution, in whole or in part, in any form shall be made. The Subscriber acknowledges that the Products contain valuable, confidential information and trade secrets and that unauthorized use and/or copying is harmful to Websense. The Subscriber may not directly or indirectly transfer, assign, publish, display, disclose, rent, lease, modify, loan, distribute, or create derivative works based on the Products or any part thereof. The Subscriber may not reverse engineer (except as required by law for interoperability), decompile, translate, adapt, or disassemble the Products, nor shall the Subscriber attempt to create the source code from the object code for the Software. Any third party software included in the Products may only be used in conjunction with the Products, and not independently from the Products. Subscriber may not, and shall not allow third parties to, publish, distribute or disclose the results of any benchmark tests performed on the Products without Websense's prior written approval. Subscriber represents and warrants that it will comply with all laws, rules and regulations which apply to its use of the Products. Subscriber further represents and warrants that the Products will not be used to filter, screen, manage or censor Internet content for consumers without (a) permission from the affected consumers and (b) Websense's express prior written approval which may be withheld in Websense's sole and absolute discretion.
For the term of the Subscription, Websense warrants that the Products will operate in substantial conformance with the then current Websense published documentation under normal use. Notwithstanding the previous sentence, Websense does not warrant that: (i) the Products will be free of defects; (ii) the Products will satisfy all of the Subscriber's requirements; (iii) the Products will operate without interruption or error; (iv) the Products will always locate or block access to or transmission of all desired addresses, applications and/or files; (v) the Products will identify every transmission or file that should potentially be located or blocked; (vi) addresses and files contained in the Products will be appropriately categorized; or (vii) that the algorithms used in the Products will be complete or accurate. Websense shall use reasonable efforts to remedy any significant non-conformance in the Products which is reported to Websense that Websense can reasonably identify and confirm. Websense or its representative will repair or replace any such non-conforming or defective Products, or refund the Subscription Fees paid for the then current term, in Websense' discretion. This paragraph sets forth the sole and exclusive remedy and Websense' exclusive liability for any breach of warranty or other duty related to the Products. Any unauthorized modification of the Products, tampering with the Products, use of the Products inconsistent with the accompanying documentation, or related breach of this Agreement shall void the aforementioned warranty. EXCEPT AS EXPLICITLY SET FORTH HEREIN AND TO THE EXTENT ALLOWED BY LAW, THERE ARE NO OTHER WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY, NON-INFRINGEMENT, TITLE OR FITNESS FOR A PARTICULAR PURPOSE WITH RESPECT TO THE PRODUCTS.
TO THE FULLEST EXTENT PERMITTED BY LAW, UNDER NO CIRCUMSTANCES WILL WEBSENSE, ITS AFFILIATES, ITS LICENSORS OR RESELLERS BE LIABLE FOR ANY DIRECT, INDIRECT, CONSEQUENTIAL, SPECIAL, PUNITIVE OR INCIDENTAL DAMAGES, WHETHER FORESEEABLE OR UNFORESEEABLE, ARISING OUT OF OR RELATED TO THIS AGREEMENT INCLUDING, BUT NOT LIMITED TO CLAIMS FOR LOSS OF DATA, GOODWILL, OPPORTUNITY, REVENUE, PROFITS, OR USE OF THE PRODUCTS, INTERRUPTION IN USE OR AVAILABILITY OF DATA, STOPPAGE OF OTHER WORK OR IMPAIRMENT OF OTHER ASSETS, PRIVACY, ACCESS TO OR USE OF ANY ADDRESSES OR FILES THAT SHOULD HAVE BEEN LOCATED OR BLOCKED, NEGLIGENCE, BREACH OF CONTRACT, TORT OR OTHERWISE AND THIRD PARTY CLAIMS, EVEN IF WEBSENSE HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. IN NO EVENT WILL WEBSENSE'S AGGREGATE LIABILITY ARISING OUT OF OR RELATED TO THIS AGREEMENT EXCEED THE TOTAL AMOUNT ACTUALLY PAID BY THE SUBSCRIBER TO WEBSENSE FOR THE APPLICABLE PRODUCTS OVER THE ONE YEAR PERIOD PRIOR TO THE EVENT OUT OF WHICH THE CLAIM AROSE FOR THE PRODUCTS THAT DIRECTLY CAUSED THE LIABILITY.
This Agreement is effective until the end of the Subscription Term for such use as is authorized, or until terminated by either party. The Subscriber may terminate this Agreement at any time by uninstalling the Software and destroying or returning to Websense all copies of the Products in the Subscriber's possession or under the Subscriber's control. However, Subscriber shall not be entitled to a refund of any prepaid or other fees. Websense may terminate this Agreement if Websense finds that the Subscriber has violated the terms hereof. Upon notification of termination, the Subscriber agrees to cease using and destroy or return to Websense all copies of the Products and to certify in writing that all known copies thereof, including backup copies, have been destroyed. Section 2-7, 9 and 11 shall survive the termination of this Agreement.
8. Government Restricted Rights
The Products are provided with "RESTRICTED RIGHTS." Use, duplication, or disclosure by the U.S. Government is subject to restrictions as set forth in FAR52.227-14 and DFAR252.227-7013 et seq. or its successor. Use of the Products by the Government constitutes acknowledgment of Websense's proprietary rights therein. Contractor or Manufacturer is Websense.
The Products include software products licensed from third parties. Such third parties have no obligations or liability to the Subscriber under this Agreement but are third party beneficiaries of this Agreement.
Certain Products provided under the Agreement are subject to export controls administered by the United States and other countries. Export or diversion contrary to U.S. law is prohibited. U.S. law prohibits export or re-export of the software or technology to Cuba, Iran, North Korea, Sudan and Syria or to a resident or national of those countries. It also prohibits export or re-export of the software or technology to any person or entity on the U.S. Department of Commerce Denied Persons List, Entities List or Unverified List; the U.S. Department of State Debarred List; or any of the lists administered by the U.S. Department of Treasury, including lists of Specially Designated Nationals, Specially Designated Terrorists or Specially Designated Narcotics Traffickers. U.S. law also prohibits use of the software or technology with chemical, biological or nuclear weapons, or with missiles. Subscriber warrants that it is not located in, or a resident or national, of any such country; that it is not on any such list; that it will not use the software or technology for any such use; and that it will otherwise comply with export controls.
Websense may periodically send the Subscriber messages of an informational or advertising nature via email. The Subscriber may choose to "opt-out" of receiving these messages by sending an email to optoutlegal@websense.com requesting the opt-out. The Subscriber acknowledges and agrees that by sending such email and "opting out" it will not receive emails containing messages concerning upgrades and enhancements to Products. However, Websense may still send emails of a technical nature. Subscriber acknowledges that Websense may use Subscriber's company name only in a list of Websense customers. The Subscriber may not transfer any of the Subscriber's rights to use the Products or assign this Agreement to another person or entity, without first obtaining prior written approval from Websense. Notices sent to Websense shall be sent to the attention of the General Counsel at 10240 Sorrento Valley Road, San Diego, CA 92121 USA. Any dispute arising out of or relating to this Agreement or the breach thereof shall be governed by the laws of the State of California, USA for all claims arising in or related to the United States, Canada, or Mexico and Dublin, Ireland for all other claims, In either case, without regard to or application of choice of laws, rules or principles. Both parties herby consent to the exclusive jurisdiction of the state and federal courts in San Diego, California, USA, for all claims arising in or related to the United States, Canada or Mexico and Dublin, Ireland for all other claims. Both parties expressly waive any objections or defense based upon lack of personal jurisdiction or venue. This Agreement shall constitute the entire Agreement between the parties hereto. Any waiver or modification of this Agreement shall only be effective if it is in writing and signed by both parties. If any part of this Agreement is found invalid or unenforceable by a court of competent jurisdiction, the remainder of this Agreement shall be interpreted so as to reasonably affect the intention of the parties. Websense is not obligated under any other agreements unless they are in writing and signed by an authorized representative of Websense.