Web Filter - Revision history

Græmer: /* HTTP Request */

2022-09-16T14:55:29Z

HTTP Request

← Older revision		Revision as of 14:55, 16 September 2022
Line 64:		Line 64:
	# The destination site of the request is checked against the Pass Sites list. If a match is found, the traffic is allowed.		# The destination site of the request is checked against the Pass Sites list. If a match is found, the traffic is allowed.
	# If 'Restrict Google applications' is enabled, the appropriate header is added to the request using the 'Allowed Domains' that have been configured.		# If 'Restrict Google applications' is enabled, the appropriate header is added to the request using the 'Allowed Domains' that have been configured.
	# If 'Pass if referrer matches Pass Sites' is enabled, the referrer is checked against the Pass Sites list. If a match is found, the traffic is allowed.		# If 'Pass if referrer matches any Pass Sites' is enabled, the referrer is checked against the Pass Sites list. If a match is found, the traffic is allowed.
	# If the Unblock option is enabled, the destination site and the source IP of the request are checked against the unblock list. If a match is found, the traffic is allowed.		# If the Unblock option is enabled, the destination site and the source IP of the request are checked against the unblock list. If a match is found, the traffic is allowed.
	# If 'Block pages from IP only hosts' is enabled, the request will be evaluated and blocked if the destination is an IP address.		# If 'Block pages from IP only hosts' is enabled, the request will be evaluated and blocked if the destination is an IP address.

Græmer: /* Block Options */

2022-09-16T14:54:50Z

Block Options

← Older revision		Revision as of 14:54, 16 September 2022
Line 490:		Line 490:
	==== Block Options ====		==== Block Options ====

	* '''Block QUIC Sessions (UDP port 443)''': If enabled, ~~the firewall~~ prevents browsers from using the [https://en.wikipedia.org/wiki/QUIC QUIC] protocol. QUIC is used by Chrome browser to access many types of Google applications and services. By allowing QUIC ~~traffic the firewall~~ has less visibility and control over this type of traffic.		* '''Block QUIC Sessions (UDP port 443)''': If enabled, Web Filter prevents browsers from using the [https://en.wikipedia.org/wiki/QUIC QUIC] protocol. QUIC is used by Chrome browser to access many types of Google applications and services. By allowing QUIC, NG Firewall has less visibility and control over this type of traffic.

	* '''Block pages from IP only hosts''': When this option is enabled, users entering an IP address rather than domain name will be blocked.		* '''Block pages from IP only hosts''': When this option is enabled, users entering an IP address rather than domain name will be blocked.

	* '''Pass if ~~HTTP referrers match~~ Pass Sites'''. When this option is checked, if a ~~page contains~~ external content ~~from any site in ''Pass Sites''~~, that external content will be passed regardless of ~~other block policies~~.		* '''Pass if referrer matches any Pass Sites'''. When this option is checked, if a site allowed via a Pass Site entry links to external content using a referrer, that external content will be passed regardless of Category settings. Please note that this setting requires [[SSL Inspector]] to work with HTTPS sites and many sites no longer use referrers.

	* '''Close connection for blocked HTTPS sessions without redirecting to block page'''. If enabled, secure sites blocked by Web Filter do not redirect the user to a denial page and close the connection without any notice to the user. This is useful when you are not using [[SSL Inspector]] and the server's root certificate is not installed on the client device.		* '''Close connection for blocked HTTPS sessions without redirecting to block page'''. If enabled, secure sites blocked by Web Filter do not redirect the user to a denial page and close the connection without any notice to the user. This is useful when you are not using [[SSL Inspector]] and the server's root certificate authority is not installed on the client device.

	==== Google Restrictions ====		==== Google Restrictions ====

Græmer: /* About Web Filter */

2022-05-03T18:38:21Z

About Web Filter

← Older revision		Revision as of 18:38, 3 May 2022
Line 44:		Line 44:
	Web Filter monitors HTTP and HTTPS traffic on your network to filter and log web activities and block inappropriate content. Web Filter also appeals to customers who require an added level of protection or are subject to regulations, for example Web Filter helps libraries comply with the [http://en.wikipedia.org/wiki/Children%27s_Internet_Protection_Act Children's Internet Protection Act]). Need to block Pornography or Hate Speech on your network? Web Filter is your answer.		Web Filter monitors HTTP and HTTPS traffic on your network to filter and log web activities and block inappropriate content. Web Filter also appeals to customers who require an added level of protection or are subject to regulations, for example Web Filter helps libraries comply with the [http://en.wikipedia.org/wiki/Children%27s_Internet_Protection_Act Children's Internet Protection Act]). Need to block Pornography or Hate Speech on your network? Web Filter is your answer.

	* '''Real-time classification and updates''': When your users visit a site, NG Firewall sends the URL to the [https://www.webroot.com/us/en/business/threat-intelligence/internet/web-classification-and-reputation-services Webroot ~~Brightcloud®~~] to be categorized. When the data is returned, NG Firewall keeps a temporary local cache of the site and category to speed up the process the next time the URL is requested. This data is then used to flag or allow users access to the site they have requested, all without any appreciable increase in load time. If a site is not categorized upon request, it is autocategorized by our partners at [https://www.webroot.com Webroot] and put into a queue to be verified by a human. Because this is done dynamically, new sites and updated URLs are allowed or flagged according to your settings without additional intervention, plus you have the option of requesting [https://www.brightcloud.com/tools/url-ip-lookup.php recategorization] of sites.		* '''Real-time classification and updates''': When your users visit a site, NG Firewall sends the URL to the [https://www.webroot.com/us/en/business/threat-intelligence/internet/web-classification-and-reputation-services Webroot BrightCloud®] to be categorized. When the data is returned, NG Firewall keeps a temporary local cache of the site and category to speed up the process the next time the URL is requested. This data is then used to flag or allow users access to the site they have requested, all without any appreciable increase in load time. If a site is not categorized upon request, it is autocategorized by our partners at [https://www.webroot.com Webroot] and put into a queue to be verified by a human. Because this is done dynamically, new sites and updated URLs are allowed or flagged according to your settings without additional intervention, plus you have the option of requesting [https://www.brightcloud.com/tools/url-ip-lookup.php recategorization] of sites.

	* '''HTTPS Filtering''': Web Filter has multiple techniques to deal with HTTPS, SSL-encrypted HTTP. HTTPS traffic is encrypted so only some information is visible and this information is used to categorize the session. More information on how this is down below.		* '''HTTPS Filtering''': Web Filter has multiple techniques to deal with HTTPS, SSL-encrypted HTTP. HTTPS traffic is encrypted so only some information is visible and this information is used to categorize the session. More information on how this is down below.

Græmer at 18:36, 3 May 2022

2022-05-03T18:36:29Z

← Older revision		Revision as of 18:36, 3 May 2022
Line 44:		Line 44:
	Web Filter monitors HTTP and HTTPS traffic on your network to filter and log web activities and block inappropriate content. Web Filter also appeals to customers who require an added level of protection or are subject to regulations, for example Web Filter helps libraries comply with the [http://en.wikipedia.org/wiki/Children%27s_Internet_Protection_Act Children's Internet Protection Act]). Need to block Pornography or Hate Speech on your network? Web Filter is your answer.		Web Filter monitors HTTP and HTTPS traffic on your network to filter and log web activities and block inappropriate content. Web Filter also appeals to customers who require an added level of protection or are subject to regulations, for example Web Filter helps libraries comply with the [http://en.wikipedia.org/wiki/Children%27s_Internet_Protection_Act Children's Internet Protection Act]). Need to block Pornography or Hate Speech on your network? Web Filter is your answer.

	* '''Real-time classification and updates''': When your users visit a site, ~~Untangle~~ sends the URL to the [https://www.webroot.com/us/en/business/threat-intelligence/internet/web-classification-and-reputation-services Webroot Brightcloud®] to be categorized. When the data is returned, ~~Untangle~~ keeps a temporary local cache of the site and category to speed up the process the next time the URL is requested. This data is then used to flag or allow users access to the site they have requested, all without any appreciable increase in load time. If a site is not categorized upon request, it is autocategorized by our partners at [https://www.webroot.com Webroot] and put into a queue to be verified by a human. Because this is done dynamically, new sites and updated URLs are allowed or flagged according to your settings without additional intervention, plus you have the option of requesting [https://www.brightcloud.com/tools/url-ip-lookup.php recategorization] of sites.		* '''Real-time classification and updates''': When your users visit a site, NG Firewall sends the URL to the [https://www.webroot.com/us/en/business/threat-intelligence/internet/web-classification-and-reputation-services Webroot Brightcloud®] to be categorized. When the data is returned, NG Firewall keeps a temporary local cache of the site and category to speed up the process the next time the URL is requested. This data is then used to flag or allow users access to the site they have requested, all without any appreciable increase in load time. If a site is not categorized upon request, it is autocategorized by our partners at [https://www.webroot.com Webroot] and put into a queue to be verified by a human. Because this is done dynamically, new sites and updated URLs are allowed or flagged according to your settings without additional intervention, plus you have the option of requesting [https://www.brightcloud.com/tools/url-ip-lookup.php recategorization] of sites.

	* '''HTTPS Filtering''': Web Filter has multiple techniques to deal with HTTPS, SSL-encrypted HTTP. HTTPS traffic is encrypted so only some information is visible and this information is used to categorize the session. More information on how this is down below.		* '''HTTPS Filtering''': Web Filter has multiple techniques to deal with HTTPS, SSL-encrypted HTTP. HTTPS traffic is encrypted so only some information is visible and this information is used to categorize the session. More information on how this is down below.
Line 106:		Line 106:
	{{AppScreenshot\|web-filter\|search-terms}}		{{AppScreenshot\|web-filter\|search-terms}}

	In many cases you may have an existing list of search terms that you want to import. For example, you can find several banned words from Facebook, YouTube, Wordpress and other sources [https://www.freewebheaders.com/full-list-of-bad-words-banned-by-google/ here]. The import feature enables you to import these lists from a comma separated or newline delimited file. You can also import in JSON format in case you are transferring a list from another ~~Untangle~~ NG Firewall.		In many cases you may have an existing list of search terms that you want to import. For example, you can find several banned words from Facebook, YouTube, Wordpress and other sources [https://www.freewebheaders.com/full-list-of-bad-words-banned-by-google/ here]. The import feature enables you to import these lists from a comma separated or newline delimited file. You can also import in JSON format in case you are transferring a list from another NG Firewall.

	{{Note\|text='''Note:''' [[SSL Inspector]] must be installed and enabled to use search filtering. }}		{{Note\|text='''Note:''' [[SSL Inspector]] must be installed and enabled to use search filtering. }}
Line 500:		Line 500:
	==== Google Restrictions ====		==== Google Restrictions ====

	* '''Restrict Google applications''': When this option is enabled, only domains listed in '''Domain''' are allowed to access Google applications such as Gmail. All others are blocked by Google. Multiple domains can be specified, separated by commas such as '''~~untangle~~.com,domain.com'''. This adds an X-GoogApps-Allowed-Domains header to web requests which then gets enforced on ~~google~~'s servers. More information on this feature can be found [https://support.google.com/a/answer/1668854?hl=en here].		* '''Restrict Google applications''': When this option is enabled, only domains listed in '''Domain''' are allowed to access Google applications such as Gmail. All others are blocked by Google. Multiple domains can be specified, separated by commas such as '''google.com,domain.com'''. This adds an X-GoogApps-Allowed-Domains header to web requests which then gets enforced on Google's servers. More information on this feature can be found [https://support.google.com/a/answer/1668854?hl=en here].

	{{Note\|text='''Note:''' [[SSL Inspector]] must be installed and enabled to restrict Google applications. }}		{{Note\|text='''Note:''' [[SSL Inspector]] must be installed and enabled to restrict Google applications. }}
Line 518:		Line 518:
	\|-		\|-
	\| appname		\| appname
	\| The ~~Untangle~~ app that is responsible for the denial.		\| The NG Firewall app that is responsible for the denial.
	\|-		\|-
	\| appid		\| appid
	\| The ID of the ~~Untangle~~ app that is responsible for the denial.		\| The ID of the NG Firewall app that is responsible for the denial.
	\|-		\|-
	\| clientAddress		\| clientAddress
Line 536:		Line 536:
	:If Unblock is set to '''None''' no users will be allowed to bypass the block page. If Unblock is set to '''Temporary''' users will be allowed to visit the site for one hour from the time it is unblocked. If Unblock is set to '''Permanent and Global''' then users will be allowed to visit the site and unblocked sites will be added to the permanent global pass list so it will always be allowed in the future.		:If Unblock is set to '''None''' no users will be allowed to bypass the block page. If Unblock is set to '''Temporary''' users will be allowed to visit the site for one hour from the time it is unblocked. If Unblock is set to '''Permanent and Global''' then users will be allowed to visit the site and unblocked sites will be added to the permanent global pass list so it will always be allowed in the future.

	:You also have the option of setting a password to Unblock; it can either be the existing Administrator password for the ~~Untangle~~ or you can set a new, separate password only for the Unblock feature.		:You also have the option of setting a password to Unblock; it can either be the existing Administrator password for the NG Firewall or you can set a new, separate password only for the Unblock feature.

	* '''Clear Category URL Cache''': This option will clear the local cache of categorized sites and URLs. After clearing the cache all new web visits will be looked up fresh using the categorization service. The cache automatically cleans itself as entries become old or stale, so this is mostly for testing.		* '''Clear Category URL Cache''': This option will clear the local cache of categorized sites and URLs. After clearing the cache all new web visits will be looked up fresh using the categorization service. The cache automatically cleans itself as entries become old or stale, so this is mostly for testing.

Bcarmichael: /* Block Options */

2020-10-14T01:47:43Z

Block Options

← Older revision		Revision as of 01:47, 14 October 2020
Line 495:		Line 495:

	* '''Pass if HTTP referrers match Pass Sites'''. When this option is checked, if a page contains external content from any site in ''Pass Sites'', that external content will be passed regardless of other block policies.		* '''Pass if HTTP referrers match Pass Sites'''. When this option is checked, if a page contains external content from any site in ''Pass Sites'', that external content will be passed regardless of other block policies.

			* '''Close connection for blocked HTTPS sessions without redirecting to block page'''. If enabled, secure sites blocked by Web Filter do not redirect the user to a denial page and close the connection without any notice to the user. This is useful when you are not using [[SSL Inspector]] and the server's root certificate is not installed on the client device.

	==== Google Restrictions ====		==== Google Restrictions ====

Jcoffin: /* Search Filter */

2020-07-08T21:10:48Z

Search Filter

← Older revision		Revision as of 21:10, 8 July 2020
Line 98:		Line 98:
	{{AppScreenshot\|web-filter\|categories}}		{{AppScreenshot\|web-filter\|categories}}

	=== Search ~~Filter~~ ===		=== Search Terms ===

	Search filtering enables you to flag or block specific search terms your users perform on popular search sites including Google, Bing, Ask, Yahoo, and YouTube. For example, if someone searches Google and includes the word "suicide", or they search for "twerking" videos on YouTube you can have these activities flagged or blocked.		Search Terms filtering enables you to flag or block specific search terms your users perform on popular search sites including Google, Bing, Ask, Yahoo, and YouTube. For example, if someone searches Google and includes the word "suicide", or they search for "twerking" videos on YouTube you can have these activities flagged or blocked.

	Under Search Filter you can add terms you want to be blocked or flagged. Search Filter terms use the [[Glob Matcher]] syntax.		Under Search Filter you can add terms you want to be blocked or flagged. Search Filter terms use the [[Glob Matcher]] syntax.

Jcoffin at 21:08, 8 July 2020

2020-07-08T21:08:28Z

← Older revision		Revision as of 21:08, 8 July 2020
Line 6:		Line 6:
	<span style="display:none" class="helpSource web_filter_block_categories">Web_Filter#Block_Categories</span>		<span style="display:none" class="helpSource web_filter_block_categories">Web_Filter#Block_Categories</span>
	<span style="display:none" class="helpSource web_filter_categories">Web_Filter#Categories</span>		<span style="display:none" class="helpSource web_filter_categories">Web_Filter#Categories</span>
	<span style="display:none" class="helpSource web_filter_search_terms">Web_Filter#~~Search_terms~~</span>		<span style="display:none" class="helpSource web_filter_search_terms">Web_Filter#Search_Terms</span>
	<span style="display:none" class="helpSource web_filter_site_lookup">Web_Filter#Site_Lookup</span>		<span style="display:none" class="helpSource web_filter_site_lookup">Web_Filter#Site_Lookup</span>
	<span style="display:none" class="helpSource web_filter_block_sites">Web_Filter#Block_Sites</span>		<span style="display:none" class="helpSource web_filter_block_sites">Web_Filter#Block_Sites</span>

Jcoffin at 21:07, 8 July 2020

2020-07-08T21:07:46Z

← Older revision		Revision as of 21:07, 8 July 2020
Line 6:		Line 6:
	<span style="display:none" class="helpSource web_filter_block_categories">Web_Filter#Block_Categories</span>		<span style="display:none" class="helpSource web_filter_block_categories">Web_Filter#Block_Categories</span>
	<span style="display:none" class="helpSource web_filter_categories">Web_Filter#Categories</span>		<span style="display:none" class="helpSource web_filter_categories">Web_Filter#Categories</span>
			<span style="display:none" class="helpSource web_filter_search_terms">Web_Filter#Search_terms</span>
	<span style="display:none" class="helpSource web_filter_site_lookup">Web_Filter#Site_Lookup</span>		<span style="display:none" class="helpSource web_filter_site_lookup">Web_Filter#Site_Lookup</span>
	<span style="display:none" class="helpSource web_filter_block_sites">Web_Filter#Block_Sites</span>		<span style="display:none" class="helpSource web_filter_block_sites">Web_Filter#Block_Sites</span>

Cblaise at 13:56, 12 June 2020

2020-06-12T13:56:51Z

← Older revision		Revision as of 13:56, 12 June 2020
Line 63:		Line 63:
	# The destination site of the request is checked against the Pass Sites list. If a match is found, the traffic is allowed.		# The destination site of the request is checked against the Pass Sites list. If a match is found, the traffic is allowed.
	# If 'Restrict Google applications' is enabled, the appropriate header is added to the request using the 'Allowed Domains' that have been configured.		# If 'Restrict Google applications' is enabled, the appropriate header is added to the request using the 'Allowed Domains' that have been configured.
	# If 'Pass if ~~referer~~ matches Pass Sites' is enabled, the ~~referer~~ is checked against the Pass Sites list. If a match is found, the traffic is allowed.		# If 'Pass if referrer matches Pass Sites' is enabled, the referrer is checked against the Pass Sites list. If a match is found, the traffic is allowed.
	# If the Unblock option is enabled, the destination site and the source IP of the request are checked against the unblock list. If a match is found, the traffic is allowed.		# If the Unblock option is enabled, the destination site and the source IP of the request are checked against the unblock list. If a match is found, the traffic is allowed.
	# If 'Block pages from IP only hosts' is enabled, the request will be evaluated and blocked if the destination is an IP address.		# If 'Block pages from IP only hosts' is enabled, the request will be evaluated and blocked if the destination is an IP address.
Line 493:		Line 493:
	* '''Block pages from IP only hosts''': When this option is enabled, users entering an IP address rather than domain name will be blocked.		* '''Block pages from IP only hosts''': When this option is enabled, users entering an IP address rather than domain name will be blocked.

	* '''Pass if HTTP ~~referers~~ match Pass Sites'''. When this option is checked, if a page contains external content from any site in ''Pass Sites'', that external content will be passed regardless of other block policies.		* '''Pass if HTTP referrers match Pass Sites'''. When this option is checked, if a page contains external content from any site in ''Pass Sites'', that external content will be passed regardless of other block policies.

	==== Google Restrictions ====		==== Google Restrictions ====

Bcarmichael: /* About Web Filter */

2020-04-10T17:07:19Z

About Web Filter

← Older revision		Revision as of 17:07, 10 April 2020
Line 47:		Line 47:
	* '''HTTPS Filtering''': Web Filter has multiple techniques to deal with HTTPS, SSL-encrypted HTTP. HTTPS traffic is encrypted so only some information is visible and this information is used to categorize the session. More information on how this is down below.		* '''HTTPS Filtering''': Web Filter has multiple techniques to deal with HTTPS, SSL-encrypted HTTP. HTTPS traffic is encrypted so only some information is visible and this information is used to categorize the session. More information on how this is down below.

	* '''Detailed categorization''': Web ~~Monitor~~ offers 79 categories and tens of billions of URLs. The Web ~~Monitor~~ database is over 100 times larger and more accurate. The abundance of categories means that you can narrow your scope - maybe you want to flag websites related to nudity, but allow sites dealing with Sexual Education.		* '''Detailed categorization''': Web Filter offers 79 categories and tens of billions of URLs. The Web Filter database is over 100 times larger and more accurate. The abundance of categories means that you can narrow your scope - maybe you want to flag websites related to nudity, but allow sites dealing with Sexual Education.

	* '''Advanced features''': Force safe-search on search engines, filter and log user searches, restrict google domains, and more!		* '''Advanced features''': Force safe-search on search engines, filter and log user searches, restrict google domains, and more!