Web Monitor - Revision history

Græmer at 18:37, 3 May 2022

2022-05-03T18:37:58Z

← Older revision		Revision as of 18:37, 3 May 2022
Line 36:		Line 36:
	Web Monitor monitors HTTP and HTTPS traffic on your network to log web activities and flag inappropriate content.		Web Monitor monitors HTTP and HTTPS traffic on your network to log web activities and flag inappropriate content.

	* '''Real-time classification and updates''': When your users visit a site, ~~Untangle~~ sends the URL to the [https://www.webroot.com/us/en/business/threat-intelligence/internet/web-classification-and-reputation-services Webroot ~~Brightcloud®~~] to be categorized. When the data is returned, ~~Untangle~~ keeps a temporary local cache of the site and category to speed up the process the next time the URL is requested. This data is then used to flag or allow users access to the site they have requested, all without any appreciable increase in load time. If a site is not categorized upon request, it is autocategorized by our partners at [https://www.webroot.com Webroot] and put into a queue to be verified by a human. Because this is done dynamically, new sites and updated URLs are allowed or flagged according to your settings without additional intervention, plus you have the option of requesting [https://www.brightcloud.com/tools/url-ip-lookup.php recategorization] of sites.		* '''Real-time classification and updates''': When your users visit a site, NG Firewall sends the URL to the [https://www.webroot.com/us/en/business/threat-intelligence/internet/web-classification-and-reputation-services Webroot BrightCloud®] to be categorized. When the data is returned, NG Firewall keeps a temporary local cache of the site and category to speed up the process the next time the URL is requested. This data is then used to flag or allow users access to the site they have requested, all without any appreciable increase in load time. If a site is not categorized upon request, it is autocategorized by our partners at [https://www.webroot.com Webroot] and put into a queue to be verified by a human. Because this is done dynamically, new sites and updated URLs are allowed or flagged according to your settings without additional intervention, plus you have the option of requesting [https://www.brightcloud.com/tools/url-ip-lookup.php recategorization] of sites.

	* '''HTTPS Filtering''': Web Monitor has multiple techniques to deal with HTTPS, SSL-encrypted HTTP. HTTPS traffic is encrypted so only some information is visible and this information is used to categorize the session. More information on how this is down below.		* '''HTTPS Filtering''': Web Monitor has multiple techniques to deal with HTTPS, SSL-encrypted HTTP. HTTPS traffic is encrypted so only some information is visible and this information is used to categorize the session. More information on how this is down below.

Hpaunet: /* Rules */

2019-12-03T06:28:39Z

Rules

← Older revision		Revision as of 06:28, 3 December 2019
Line 111:		Line 111:
	The '''Rules''' tab allows you to specify rules to Flag traffic that passes through Web Monitor.		The '''Rules''' tab allows you to specify rules to Flag traffic that passes through Web Monitor.

	The [[Rules\|Rules documentation]] describes how rules work and how they are configured. Web Monitor uses rules to determine when to flag specific ~~session~~. Flagging a session marks it in the logs for reviewing in the event logs or reports, but has no direct effect on the network traffic.		The [[Rules\|Rules documentation]] describes how rules work and how they are configured. Web Monitor uses rules to determine when to flag specific sessions. Flagging a session marks it in the logs for reviewing in the event logs or reports, but has no direct effect on the network traffic.

	{{AppScreenshot\|web-monitor\|rules}}		{{AppScreenshot\|web-monitor\|rules}}

Bcarmichael: /* About Web Monitor */

2019-05-17T16:27:58Z

About Web Monitor

← Older revision		Revision as of 16:27, 17 May 2019
Line 34:		Line 34:
	== About Web Monitor ==		== About Web Monitor ==

	Web Monitor monitors HTTP traffic on your network to ~~monitor user behavior~~ and flag inappropriate content.		Web Monitor monitors HTTP and HTTPS traffic on your network to log web activities and flag inappropriate content.

	* '''Real-time classification and updates''': When your users visit a site, Untangle sends the URL to the [~~http~~://~~zvelo~~.com/~~technology~~/~~zvelodb~~-~~url~~-~~database cloud~~] to be categorized. When the data is returned, Untangle keeps a temporary local cache of the site and category to speed up the process the next time the URL is requested. This data is then used to flag or allow users access to the site they have requested, all without any appreciable increase in load time. If a site is not categorized upon request, it is autocategorized by our partners at [~~http~~://~~zvelo~~.com ~~zVelo~~] and put into a queue to be verified by a human. Because this is done dynamically, new sites and updated URLs are allowed or flagged according to your settings without additional intervention, plus you have the option of requesting [~~http~~://~~zvelo~~.com/~~partners~~/~~test~~-a-~~site~~ recategorization] of sites.		* '''Real-time classification and updates''': When your users visit a site, Untangle sends the URL to the [https://www.webroot.com/us/en/business/threat-intelligence/internet/web-classification-and-reputation-services Webroot Brightcloud®] to be categorized. When the data is returned, Untangle keeps a temporary local cache of the site and category to speed up the process the next time the URL is requested. This data is then used to flag or allow users access to the site they have requested, all without any appreciable increase in load time. If a site is not categorized upon request, it is autocategorized by our partners at [https://www.webroot.com Webroot] and put into a queue to be verified by a human. Because this is done dynamically, new sites and updated URLs are allowed or flagged according to your settings without additional intervention, plus you have the option of requesting [https://www.brightcloud.com/tools/url-ip-lookup.php recategorization] of sites.

	* '''HTTPS Filtering''': Web Monitor has multiple techniques to deal with HTTPS, SSL-encrypted HTTP. HTTPS traffic is encrypted so only some information is visible and this information is used to categorize the session. More information on how this is down below.		* '''HTTPS Filtering''': Web Monitor has multiple techniques to deal with HTTPS, SSL-encrypted HTTP. HTTPS traffic is encrypted so only some information is visible and this information is used to categorize the session. More information on how this is down below.

	* '''Detailed categorization''': Web Monitor offers ~~over 140~~ categories and ~~over 450 million categorized sites~~. The Web Monitor database is over 100 times larger and more accurate. The abundance of categories means that you can narrow your scope - maybe you want to flag websites related to ~~Sex~~, but allow sites dealing with Sexual Education ~~or Pregnancy~~.		* '''Detailed categorization''': Web Monitor offers 79 categories and tens of billions of URLs. The Web Monitor database is over 100 times larger and more accurate. The abundance of categories means that you can narrow your scope - maybe you want to flag websites related to nudity, but allow sites dealing with Sexual Education.

	=== Traffic Flow ===		=== Traffic Flow ===

Dmorris at 18:11, 20 June 2018

2018-06-20T18:11:03Z

← Older revision		Revision as of 18:11, 20 June 2018
Line 12:		Line 12:
	{\| width='100%'		{\| width='100%'
	\|-		\|-
	\| align="center" \| [[Image:~~WebMonitor_128x128~~.png]]     '''Web Monitor'''		\| align="center" \| [[Image:WebMonitor.png\|128px]]     '''Web Monitor'''
	\| align="center" \|		\| align="center" \|
	{\|		{\|

Dmorris at 01:33, 19 July 2017

2017-07-19T01:33:00Z

← Older revision		Revision as of 01:33, 19 July 2017
Line 1:		Line 1:
	[[Category:Applications]]		[[Category:Applications]]
	<span style="display:none" class="helpSource web_monitor">Web_Monitor</span>		<span style="display:none" class="helpSource web_monitor">Web_Monitor</span>
			<span style="display:none" class="helpSource web_monitor_status">Web_Monitor#Status</span>
	<span style="display:none" class="helpSource web_monitor_categories">Web_Monitor#Categories</span>		<span style="display:none" class="helpSource web_monitor_categories">Web_Monitor#Categories</span>
	<span style="display:none" class="helpSource web_monitor_site_lookup">Web_Monitor#Site_Lookup</span>		<span style="display:none" class="helpSource web_monitor_site_lookup">Web_Monitor#Site_Lookup</span>

Dmorris at 20:18, 5 July 2017

2017-07-05T20:18:57Z

← Older revision		Revision as of 20:18, 5 July 2017
Line 2:		Line 2:
	<span style="display:none" class="helpSource web_monitor">Web_Monitor</span>		<span style="display:none" class="helpSource web_monitor">Web_Monitor</span>
	<span style="display:none" class="helpSource web_monitor_categories">Web_Monitor#Categories</span>		<span style="display:none" class="helpSource web_monitor_categories">Web_Monitor#Categories</span>
			<span style="display:none" class="helpSource web_monitor_site_lookup">Web_Monitor#Site_Lookup</span>
	<span style="display:none" class="helpSource web_monitor_flag_sites">Web_Monitor#Flag_Sites</span>		<span style="display:none" class="helpSource web_monitor_flag_sites">Web_Monitor#Flag_Sites</span>
	<span style="display:none" class="helpSource web_monitor_pass_sites">Web_Monitor#Pass_Sites</span>		<span style="display:none" class="helpSource web_monitor_pass_sites">Web_Monitor#Pass_Sites</span>

Dmorris at 20:18, 5 July 2017

2017-07-05T20:18:26Z

← Older revision		Revision as of 20:18, 5 July 2017
Line 1:		Line 1:
	[[Category:Applications]]		[[Category:Applications]]
	<span style="display:none" class="helpSource web_monitor">Web_Monitor</span>		<span style="display:none" class="helpSource web_monitor">Web_Monitor</span>
	<span style="display:none" class="helpSource ~~web_monitor_block_categories~~">Web_Monitor#Categories</span>		<span style="display:none" class="helpSource web_monitor_categories">Web_Monitor#Categories</span>
	<span style="display:none" class="helpSource ~~web_monitor_block_sites~~">Web_Monitor#Flag_Sites</span>		<span style="display:none" class="helpSource web_monitor_flag_sites">Web_Monitor#Flag_Sites</span>
	<span style="display:none" class="helpSource web_monitor_pass_sites">Web_Monitor#Pass_Sites</span>		<span style="display:none" class="helpSource web_monitor_pass_sites">Web_Monitor#Pass_Sites</span>
	<span style="display:none" class="helpSource web_monitor_pass_clients">Web_Monitor#Pass_Clients</span>		<span style="display:none" class="helpSource web_monitor_pass_clients">Web_Monitor#Pass_Clients</span>

Dmorris at 21:27, 14 June 2017

2017-06-14T21:27:10Z

← Older revision		Revision as of 21:27, 14 June 2017
Line 18:		Line 18:
	\|[http://www.untangle.com/store/web-monitor-conf.html Web Monitor Description Page]		\|[http://www.untangle.com/store/web-monitor-conf.html Web Monitor Description Page]
	\|-		\|-
	\|[http://~~www~~.untangle.com/~~videos~~/ ~~Web Monitor Video Demo]~~		\|[http://demo.untangle.com/admin/index.do#apps/1/web-monitor Web Monitor Demo]
	\|-
	~~\|[http://www.untangle~~.~~com~~/~~store~~/web-monitor~~-conf.html~~ Web Monitor ~~Screenshots~~]
	\|-		\|-
	\|[http://forums.untangle.com/web-monitor/ Web Monitor Forums]		\|[http://forums.untangle.com/web-monitor/ Web Monitor Forums]

Dmorris at 16:23, 12 June 2017

2017-06-12T16:23:56Z

← Older revision		Revision as of 16:23, 12 June 2017
Line 68:		Line 68:

	This section reviews the different settings and configuration options available for Web Monitor.		This section reviews the different settings and configuration options available for Web Monitor.


			=== Status ===

			This displays the current status and some statistics.

			{{AppScreenshot\|web-monitor\|status}}


	=== Categories ===		=== Categories ===

Dmorris at 16:02, 12 June 2017

2017-06-12T16:02:56Z

← Older revision		Revision as of 16:02, 12 June 2017
Line 73:		Line 73:
	Categories allows you to customize which categories of sites will be flagged. Categories that are flagged will allow the user to access the site, but will be silently flagged as a violation for event logs and [[Reports]]. These flag actions operate the same way for all of the different Web Monitor options.		Categories allows you to customize which categories of sites will be flagged. Categories that are flagged will allow the user to access the site, but will be silently flagged as a violation for event logs and [[Reports]]. These flag actions operate the same way for all of the different Web Monitor options.

	~~[[Image:WM_categories.png~~\|~~center~~\|~~frame\|Categories]]~~		{{AppScreenshot\|web-monitor\|categories}}


	=== Flag Sites ===		=== Flag Sites ===

	Under Flag Sites you can add individual domain names you want to be flagged - just enter the domain name (e.g. youtube.com) and specify your chosen action. This list uses [[URL Matcher]] syntax.		Under Flag Sites you can add individual domain names you want to be flagged - just enter the domain name (e.g. youtube.com) and specify your chosen action. This list uses [[URL Matcher]] syntax.

	~~[[Image:WM_flagSites.png~~\|~~center~~\|~~frame\|A few~~ sites ~~entered into the Flag Sites list]]~~		{{AppScreenshot\|web-monitor\|flag-sites}}


	=== Pass Sites ===		=== Pass Sites ===
Line 84:		Line 87:
	Pass Sites is used to pass content that would have otherwise been flagged. This can be useful for "unflagging" sites that you don't want flagged according to flag settings. Any domains you add to the Passed Sites list will be allowed, even if flagged by category or by individual URL - just add the domain and save. Unchecking the pass option will allow the site to be flagged as if the entry was not present. This list uses [[URL Matcher]] syntax.		Pass Sites is used to pass content that would have otherwise been flagged. This can be useful for "unflagging" sites that you don't want flagged according to flag settings. Any domains you add to the Passed Sites list will be allowed, even if flagged by category or by individual URL - just add the domain and save. Unchecking the pass option will allow the site to be flagged as if the entry was not present. This list uses [[URL Matcher]] syntax.

	~~[[Image:WM_passSites.png~~\|~~center~~\|~~frame\|A few~~ sites ~~entered into the Pass Sites list]]~~		{{AppScreenshot\|web-monitor\|pass-sites}}


	=== Pass Clients ===		=== Pass Clients ===
Line 92:		Line 96:
	:If you have a few users that need to completely bypass Web Monitor controls, consider using pass lists. If you have users that simply need different Web Monitor settings, you should set up a separate rack using [[Policy Manager]]. When using this feature, please remember that DHCP IPs can change, so you'll probably want to set up either a Static IP or a Static DHCP Lease for the machine in question.		:If you have a few users that need to completely bypass Web Monitor controls, consider using pass lists. If you have users that simply need different Web Monitor settings, you should set up a separate rack using [[Policy Manager]]. When using this feature, please remember that DHCP IPs can change, so you'll probably want to set up either a Static IP or a Static DHCP Lease for the machine in question.

			{{AppScreenshot\|web-monitor\|pass-clients}}
	~~[[Image:WM_passClients.png~~\|~~center~~\|~~frame\|A few different entries in the Pass Clients list]]~~


Line 102:		Line 105:
	The [[Rules\|Rules documentation]] describes how rules work and how they are configured. Web Monitor uses rules to determine when to flag specific session. Flagging a session marks it in the logs for reviewing in the event logs or reports, but has no direct effect on the network traffic.		The [[Rules\|Rules documentation]] describes how rules work and how they are configured. Web Monitor uses rules to determine when to flag specific session. Flagging a session marks it in the logs for reviewing in the event logs or reports, but has no direct effect on the network traffic.

	~~[[Image:WM_rules.png~~\|~~center~~\|~~frame\|Rules]]~~		{{AppScreenshot\|web-monitor\|rules}}


	==== Rule Actions ====		==== Rule Actions ====
Line 434:		Line 438:
	* '''Clear Category URL Cache''': This option will clear the local cache of categorized sites and URLs. After clearing the cache all new web visits will be looked up fresh using the categorization service. The cache automatically cleans itself as entries become old or stale, so this is mostly for testing.		* '''Clear Category URL Cache''': This option will clear the local cache of categorized sites and URLs. After clearing the cache all new web visits will be looked up fresh using the categorization service. The cache automatically cleans itself as entries become old or stale, so this is mostly for testing.

	~~[[Image:WM_advanced.png~~\|~~center~~\|~~frame\|Advanced options]]~~		{{AppScreenshot\|web-monitor\|advanced}}


	== Reports ==		== Reports ==

← Older revision		Revision as of 18:11, 20 June 2018
Line 12:		Line 12:
	{\| width='100%'		{\| width='100%'
	\|-		\|-
	\| align="center" \| [[Image:~~WebMonitor_128x128~~.png]]     '''Web Monitor'''		\| align="center" \| [[Image:WebMonitor.png\|128px]]     '''Web Monitor'''
	\| align="center" \|		\| align="center" \|
	{\|		{\|