Manuel d'utilisation / d'entretien du produit 5.5 du fabricant Surf Control
Aller à la page of 157
™ SurfControl W eb Filter Administrator's Guide V ersion 5.5.
SurfControl Web Filter v5.5 Administrator’s Guide i Notices N OTICES ©1996–2008, Websense Inc. All rights reserved. 10240 Sorrento Valley Rd., San Diego, CA 92121, USA Published January 2008 This.
ii Administrator’s Guide SurfControl Web Filter v5.5 Notices.
SurfControl Web Filter v5.5 Administrator’s Guide iii T ABLE OF C ONTENTS Notices ............. ................ ................. ................ ................ ................ ............. .......................... ........ i Introduction to Web Filter .
iv Administrator’s Guide SurfControl Web Filter v5.5 SurfControl Web Filter .. ... .... ... ... ... .... ... ... ... .... ... ... ... ................ .... ... ................ ... ... ................ ......... 30 Data Displayed ...................
SurfControl Web Filter v5.5 Administrator’s Guide v HTTP Deny Page Objects ................... ................ ................ ................ ................ ................. ..... ... 84 Default .................... ................ .........
vi Administrator’s Guide SurfControl Web Filter v5.5 Databases ........................................................ ............................................................ 1 27 Creating a New SQL Server Database ...... .... ... ... ... ... .
Chapter 1 Introduction to Web Filter About SurfControl Web Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
2 Administrator’s Guide SurfControl Web Filter v5.5 I NTRODUCTION TO W EB F ILTER About SurfControl Web Filter 1 A BOUT S URF C ONTROL W EB F ILTER Web-based e- mail, file downlo ads, Instan t Messa.
Chapter 2 Basic Configuration Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . page 4 Basic Service Settings . . . . . . . . . . . . . . . . . . . . . . .
4 Administrator’s Guide SurfControl Web Filter v5.5 B ASIC C ONFIGURATION Introduction 2 I NTRODUCTION This chapter introduces yo u to some basic features and configuration settings that will help you set up Web Filter effectively .
SurfControl Web Filter v5.5 Administrator’s Guide 5 B ASIC C ONFIGURATION Basic Service Settings 2 B ASIC S ERVICE S ETTINGS This section will explain so me of the basic service settings for Web Filter .
6 Administrator’s Guide SurfControl Web Filter v5.5 B ASIC C ONFIGURATION Basic Service Settings 2 Configure Subnets Configuring su bnets helps to reduce or balance th e load on y our Web Filter server(s), enabling it to w ork more efficiently .
SurfControl Web Filter v5.5 Administrator’s Guide 7 B ASIC C ONFIGURATION Basic Service Settings 2 By configuring subnets on multiple Web Filter server s, you ensure the subnets are only monitored on one server in your network environment.
8 Administrator’s Guide SurfControl Web Filter v5.5 B ASIC C ONFIGURATION Basic Service Settings 2 • Catch up mode notifications – If the service become s overloaded, monitoring will be restricted to HTTP traffic. If the overload becomes critical, monitoring will be temporarily suspended.
SurfControl Web Filter v5.5 Administrator’s Guide 9 B ASIC C ONFIGURATION Initial Monitore d Data Settings 2 I NITIAL M ONITORED D ATA S ETTINGS This section will explain what the defau lt monitoring settings are for Web Filter , and what other options are available.
10 Administrator’s Guide SurfControl Web Filter v5.5 B ASIC C ONFIGURATION Initial Monitore d Data Settings 2 Table 2-1 Monitor Settings Tab Descrip tion General Monitor new use rs By default all new users who l og on to your network are detected by Web Filter , and th eir Internet acti vity is automatically monitored.
SurfControl Web Filter v5.5 Administrator’s Guide 11 B ASIC C ONFIGURATION Initial Monitore d Data Settings 2 Protocols Web Filter monitors the following protocols and associated ports by default: .
12 Administrator’s Guide SurfControl Web Filter v5.5 B ASIC C ONFIGURATION Initial Monitore d Data Settings 2 M ORE I NFORMATION For further details on the Mo nitored Data settings, see Chapter 6 .
SurfControl Web Filter v5.5 Administrator’s Guide 13 B ASIC C ONFIGURATION Basic Rule Config uration 2 B ASIC R ULE C ONFIGURATION SurfControl Web Filter uses rules, which you can use to apply your Acceptable Use Policy to your users. There are three typ es of rules: • Allow - Uses positive filtering to gi ve access.
14 Administrator’s Guide SurfControl Web Filter v5.5 B ASIC C ONFIGURATION Scheduling T asks 2 S CHEDULING T ASKS When you ran the Configuration Wizard , you were asked to set up two scheduled tasks.
Chapter 3 Remote Administration Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . page 16 What the Remote Administration Client Does . . . . . . . . . . . .
16 Administrator’s Guide SurfControl Web Filter v5.5 R EMOTE A DMINISTRATION Introduction 3 I NTRODUCTION The Remote Administration Cli ent allows you to remote ly access the Web Filter server to create reports, design or edit rules, and view the data base.
Chapter 4 Licensing Licensing Web Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
18 Administrator’s Guide SurfControl Web Filter v5.5 L ICENSING Licensing Web Filter 4 L ICENSING W EB F ILTER You can use Web Filter on a trial basis for 30 days.
Chapter 5 Privacy Edition What It Does . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . page 20 Privacy Edition Features . . . . . . . . . . . . . . . . . . . . . . . .
20 Administrator’s Guide SurfControl Web Filter v5.5 P RIVACY E DITION What It Does 5 W HAT I T D OES In certain European countries, laws have be en pa ssed which prohibit the use of monitoring software to check user browsing details, unless express perm ission has been g iven by a manager and a un ion representative.
SurfControl Web Filter v5.5 Administrator’s Guide 21 P RIVACY E DITION What It Does 5 For further information ab out available Repo rts, see the SurfCont rol Report Central Administrator ’s Guide .
22 Administrator’s Guide SurfControl Web Filter v5.5 P RIVACY E DITION Privacy Edition Featur es 5 P RIVACY E DITION F EATURES Viewing users details r e quires the permission of a manager and a un ion representative. The Privacy Edition is supplied with a precon figured password of ‘admin’, for both the manager and union representative.
SurfControl Web Filter v5.5 Administrator’s Guide 23 P RIVACY E DITION Privacy Edition Features 5 To view a u ser ’s deta ils: 1 Select a user in the Summary User Information panel. 2 From the Monitored Users Tasks , select View User Details . 3 Have the Manager enter their password.
24 Administrator’s Guide SurfControl Web Filter v5.5 P RIVACY E DITION Privacy Edition Featur es 5.
Chapter 6 The Web Filter Manager Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . page 26 Working With the Web Filter Manag er . . . . . . . . . . . . . . .
26 Administrator’s Guide SurfControl Web Filter v5.5 T HE W EB F ILTER M ANAGER Introduction 6 I NTRODUCTION The SurfControl We b Filter Manag er: • Shows the Servers and data bases you are monitoring with Web Filter . • Displays the historic Internet activity of users.
SurfControl Web Filter v5.5 Administrator’s Guide 27 T HE W EB F ILTER M ANAGER Working With t he Web Filter Manag er 6 W ORKING W ITH THE W EB F ILTER M ANAGER The Web Filter Manager scree n is divided into 3 columns: • Navigatio n pane - This displays the server and database conn ections you have made with Web Filter .
28 Administrator’s Guide SurfControl Web Filter v5.5 T HE W EB F ILTER M ANAGER Working With the Web Filter Man ager 6 T HE I NFORMATION P ANE The information pane consists of two tabs: • Tasks - A list of tasks that can be performed, depending on the item selected in the navigation pane.
SurfControl Web Filter v5.5 Administrator’s Guide 29 T HE W EB F ILTER M ANAGER Working With t he Web Filter Manag er 6 For more details on the information displaye d and tasks at this level.
30 Administrator’s Guide SurfControl Web Filter v5.5 T HE W EB F ILTER M ANAGER SurfCont rol Web Filter 6 S URF C ONTROL W EB F ILTER This is the default view when you open the Web Filte r Man ager .
SurfControl Web Filter v5.5 Administrator’s Guide 31 T HE W EB F ILTER M ANAGER SurfControl Web Fil te r 6 4 Click OK . 5 T he server should be visible in the Navigation tree. Add Database To add a new database to an existing server: 1 Select the SurfControl Web Filter item in the Navigation pane tree.
32 Administrator’s Guide SurfControl Web Filter v5.5 T HE W EB F ILTER M ANAGER Web Filter Se rver 6 W EB F ILTER S ERVER When you installed SurfCo ntrol Web Filter , you set up a server using the Con figuration Wizard.
SurfControl Web Filter v5.5 Administrator’s Guide 33 T HE W EB F ILTER M ANAGER Web Filter Ser ver 6 T ASKS From the SurfControl Web Filter Server view , you can pe rform the fo llowing task s: • .
34 Administrator’s Guide SurfControl Web Filter v5.5 T HE W EB F ILTER M ANAGER Monitored Data 6 M ONITORED D ATA Monitored data is where you see who has be en using th e internet, the sites they have visited, and the categories those sites have been assigne d to in the SurfControl Inte rnet Threat Database.
SurfControl Web Filter v5.5 Administrator’s Guide 35 T HE W EB F ILTER M ANAGER Monitored Data 6 •A c c e s s T i m e • Categorization Meth od • Category • Connection Status • Destination .
36 Administrator’s Guide SurfControl Web Filter v5.5 T HE W EB F ILTER M ANAGER Users 6 U SERS SurfControl Web Filter monitors all users who log on to your network. The Users tab shows various information about users’ Internet activity . You can pe rform tasks, suc h as assig ning users t o groups fo r more meaningful rep o rting.
SurfControl Web Filter v5.5 Administrator’s Guide 37 T HE W EB F ILTER M ANAGER Users 6 • Destination - The Internet addre ss accessed. This is the domain level address, for example www .mysite.com. • Detail - Shows any page level det ail of the In te rn et req uest, for example www .
38 Administrator’s Guide SurfControl Web Filter v5.5 T HE W EB F ILTER M ANAGER Users 6 T ASKS The following user tasks can be performed from the Information pane: Table 6-3 Users tab Tasks Section Tasks Monitored Data Note: Monitored Data tasks are available across all the Monitored Data tabs.
SurfControl Web Filter v5.5 Administrator’s Guide 39 T HE W EB F ILTER M ANAGER Users 6 M ONITORED D ATA T ASKS Update Configuration After perfo rming certa in tasks, the following me ssage will ap pear at th e top of th e Monitore d Data screen .
40 Administrator’s Guide SurfControl Web Filter v5.5 T HE W EB F ILTER M ANAGER Users 6 1 1 Click Apply , then OK to close the Moni tor Settings dialog box.
SurfControl Web Filter v5.5 Administrator’s Guide 41 T HE W EB F ILTER M ANAGER Users 6 Unmonitoring Destin ations or Users Unmonitoring users or destinations is useful when yo u want Web Filter to ignore specific destinations, or the browsing behaviour of particular u sers.
42 Administrator’s Guide SurfControl Web Filter v5.5 T HE W EB F ILTER M ANAGER Users 6 Rename User This option allows you to rename a user in the We b F ilter data base. In the dialog b ox that displays, e nter a name in the New name text box. The original informat ion about the user is also listed.
SurfControl Web Filter v5.5 Administrator’s Guide 43 T HE W EB F ILTER M ANAGER Users 6 1 Select one or multiple users in the Summary User Information p ane. 2 Click Delete User(s) in the Monitored Users Task s box, or right-click the selected user(s) and click Delete User(s) from the menu .
44 Administrator’s Guide SurfControl Web Filter v5.5 T HE W EB F ILTER M ANAGER Users 6 M ONITORED C ONNECTIONS T ASKS The following tasks are available fr om the Monitored Connections tasks section. Monitored Connections tasks are also available, by right-clicking the detailed user Informatio n entry for a selected user .
SurfControl Web Filter v5.5 Administrator’s Guide 45 T HE W EB F ILTER M ANAGER Destinations 6 D ESTINATIONS SurfControl Web Filter stores information ab out th e dest inations visited by your user s.
46 Administrator’s Guide SurfControl Web Filter v5.5 T HE W EB F ILTER M ANAGER Destinations 6 • Categorization Metho d - The various sources of categorization ar e as follows: – Company & Intranet - The destination is specified within the Categorization tab of the We b Filter settings as a company domain or Intr anet site.
SurfControl Web Filter v5.5 Administrator’s Guide 47 T HE W EB F ILTER M ANAGER Destinations 6 M ONITORED D ESTINATIONS TASKS As well as being available from th e Information pane, you can access th e Monitored Destinations tasks by right-clicking a selected destination.
48 Administrator’s Guide SurfControl Web Filter v5.5 T HE W EB F ILTER M ANAGER Destinations 6 • Change the category - Select a new category for the s ite in the Inte rnet Threat Database. 4 If you want to change the cate gory of the site, select which category you want the site to be changed to from the Choose Category drop-down list box.
SurfControl Web Filter v5.5 Administrator’s Guide 49 T HE W EB F ILTER M ANAGER Categories 6 C ATEGORIES SurfControl Web Filter uses its Inte rnet Threat Database to categorize the destinations saved in your database. You can view the destinations grouped by category on this tab.
50 Administrator’s Guide SurfControl Web Filter v5.5 T HE W EB F ILTER M ANAGER Categories 6 • Categorization Metho d - The various sources of categorization are as follows: – Company & Intranet - The destination is specified within the Categorization tab of the We b Filter settings as a company domain or Intr anet site.
SurfControl Web Filter v5.5 Administrator’s Guide 51 T HE W EB F ILTER M ANAGER Categories 6 T ASKS The following tasks can be performe d from the Information pane. C ATEGORIES TASKS As well as being available from the Information pane, you can access the Categories tasks by right-clicking a selected categ or y .
52 Administrator’s Guide SurfControl Web Filter v5.5 T HE W EB F ILTER M ANAGER Content Protection 6 C ONTENT P ROTECTION SurfControl Web Filter has a number of tools to help you manage Internet thr.
SurfControl Web Filter v5.5 Administrator’s Guide 53 T HE W EB F ILTER M ANAGER Maintenance 6 M AINTENANCE To help continue Web Filter’s effective perfor mance, the following tools ar e available .
54 Administrator’s Guide SurfControl Web Filter v5.5 T HE W EB F ILTER M ANAGER Maintenance 6.
Chapter 7 Rules Administrator Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . page 56 Rule Objects . . . . . . . . . . . . . . . . . . . . . . . . . . . .
56 Administrator’s Guide SurfControl Web Filter v5.5 R ULES A DMINISTRATOR Introduction 7 I NTRODUCTION This chapter expla ins how you use individua l object s to bu ild up rules tha t he lp yo u en fo rce your Acceptable Use Policy .
SurfControl Web Filter v5.5 Administrator’s Guide 57 R ULES A DMINISTRATOR Introduction 7 Creating Rules To create a new ru le: 1S e l e c t New from the Rule menu, or clic k the New Rule button. 2 Choose a Who object (if required) and dr ag and drop the obje c t onto the Who section of the rule.
58 Administrator’s Guide SurfControl Web Filter v5.5 R ULES A DMINISTRATOR Introduction 7 12 Commit the changes to enable the rule. New rules are always checked as enabled b y default, however the rule will not be active until changes are committed to the database.
SurfControl Web Filter v5.5 Administrator’s Guide 59 R ULES A DMINISTRATOR Rule Objects 7 R ULE O BJECTS You can create the following Rule objec ts: • Who (page 60) • Wher e (p ag e 64) • What.
60 Administrator’s Guide SurfControl Web Filter v5.5 R ULES A DMINISTRATOR Who Objects 7 W HO O BJECTS Who objects are us ed to ap ply ru les to cer ta in ind i viduals or groups.
SurfControl Web Filter v5.5 Administrator’s Guide 61 R ULES A DMINISTRATOR Who Objects 7 User-defined Who Objects These rule objects have to be created ma nually , and can consist of the following: .
62 Administrator’s Guide SurfControl Web Filter v5.5 R ULES A DMINISTRATOR Who Objects 7 Figure 7-2 Hosts and Domain object properties 1 Enter a name for your object in the Name text box. 2 Select one of the following options: • IP address - Enter the IP address of the w or kstation the rule will be applied to.
SurfControl Web Filter v5.5 Administrator’s Guide 63 R ULES A DMINISTRATOR Who Objects 7 • MAC Address - Enter the MAC address for the computer you want the rule to apply to. Subnet Object A subnet allows you to take a single IP net work addres s and split it up so that it can be used on several interconnected local netwo rks.
64 Administrator’s Guide SurfControl Web Filter v5.5 R ULES A DMINISTRATOR Where Objects 7 W HERE O BJECTS Where obje cts are used to identify the destination s that a rule should apply to.
SurfControl Web Filter v5.5 Administrator’s Guide 65 R ULES A DMINISTRATOR Where Objects 7 A host is a computer that is connecte d to a TCP/IP network which can include t he Internet. Ea ch host has a unique IP address. A domain is a group of computers on a network that are administer ed a s a unit.
66 Administrator’s Guide SurfControl Web Filter v5.5 R ULES A DMINISTRATOR Where Objects 7 Figure 7-8 MAC Address object properti es. • Name - Enter a name for your MAC address ob ject. • MAC Address - Enter the MAC address for the computer you want the rule to apply to.
SurfControl Web Filter v5.5 Administrator’s Guide 67 R ULES A DMINISTRATOR Where Objects 7 C ATEGORY O BJECT SurfControl’s Internet Thr eat Database contains over 24 million We b sites and over 3.5 billion Web pages. These sites and page s are allocated to one of SurfCont rol’s fifty five categories as in the table below.
68 Administrator’s Guide SurfControl Web Filter v5.5 R ULES A DMINISTRATOR Where Objects 7 SurfControl Categories SurfControl’s Adaptive Th reat Intelligence team have the ability to dynamically add new categories via an Internet Threat Database update .
SurfControl Web Filter v5.5 Administrator’s Guide 69 R ULES A DMINISTRATOR Where Objects 7 – www .football365.com – www .football.guardian .co.uk It will not return www .bbc.co.uk/foo tball as ‘football’ is not part of the domain level URL. Your new category will now be seen in the Where tab Ca tegories pane.
70 Administrator’s Guide SurfControl Web Filter v5.5 R ULES A DMINISTRATOR What Objects 7 W HAT O BJECTS What objects are used to identify th e content that a rule sh ould apply to .
SurfControl Web Filter v5.5 Administrator’s Guide 71 R ULES A DMINISTRATOR What Objects 7 Windows Live Me ssenger* 1863 OSCAR (AIM/ICQ)* 5190 Yahoo! Messenger* 5050 IRC* 6660-6669 IRCS (IRC over SSL.
72 Administrator’s Guide SurfControl Web Filter v5.5 R ULES A DMINISTRATOR What Objects 7 RAdmin remote ad ministration tool 4899 SOCKS 5 1080 PPTP 1723 Streaming Media Liquid Audio* 18888 PNM/PNA 7.
SurfControl Web Filter v5.5 Administrator’s Guide 73 R ULES A DMINISTRATOR What Objects 7 Filtering IM, P2P and We b Protocols by signature The Instant Messsaging and Chat (IM) Peer 2 Peer (P2P) and Web Accelerator protocols in the table below are port-agile.
74 Administrator’s Guide SurfControl Web Filter v5.5 R ULES A DMINISTRATOR What Objects 7 To create a prec ise ban dw idt h control: 1 From the What tab, expand User Defined What Objects and click Precise Bandwid th Co nt rol s . 2 Right-clic k in the display objects window and select New .
SurfControl Web Filter v5.5 Administrator’s Guide 75 R ULES A DMINISTRATOR When Objects 7 W HEN O BJECTS When objects are used to define the time and date when a rule will be applied.
76 Administrator’s Guide SurfControl Web Filter v5.5 R ULES A DMINISTRATOR When Objects 7 Figure 7-15 After Work object properties. Weekends Right-click the object and select Properties to view . The Weekends When object has the following de fault properties : • Days of the Week – Saturday & Sunday .
SurfControl Web Filter v5.5 Administrator’s Guide 77 R ULES A DMINISTRATOR When Objects 7 Workti me Right-click the object and select Properties . The Wo rktime When object has the following default properties : • Days of the Week – Monday to Friday .
78 Administrator’s Guide SurfControl Web Filter v5.5 R ULES A DMINISTRATOR Allowance O bjects 7 A LLOWANCE O BJECTS Allowance ob jects are us ed to perm it Internet access for a specified period of t ime or to allo w a set am ount of data to be downloaded.
SurfControl Web Filter v5.5 Administrator’s Guide 79 R ULES A DMINISTRATOR Allowance Objects 7 The 10 MB Allowance object has the following default prope rties: • Type of Allowance - Volume • Allowance Limit - 10 240 KB 30 M INUTE T IME O BJECT Right-click the object and select Properties .
80 Administrator’s Guide SurfControl Web Filter v5.5 R ULES A DMINISTRATOR Allowance O bjects 7 • Stand-Alone Browsing Stand-alone browsing is a sing le connection to the In ternet.
SurfControl Web Filter v5.5 Administrator’s Guide 81 R ULES A DMINISTRATOR Notify Objects 7 N OTIFY O BJECTS Notify objects enable you to e-mail specified people within the orga nization when a rule has been triggered. These objects wor k in dif ferent ways, depending on the type of rule.
82 Administrator’s Guide SurfControl Web Filter v5.5 R ULES A DMINISTRATOR Notify Objects 7 3 Enter the address of your mail server in the SMTP mail server text box. This information can be obtained from the E-mail No tification tab in the Web Filter Servic e Settings dialog box.
SurfControl Web Filter v5.5 Administrator’s Guide 83 R ULES A DMINISTRATOR Notify Objects 7 The available file types are shown in the table belo w : Table 7-7 Notification File Types File Type Group File Extensions Audio Files aac, aif, aifc, aiff, au, cda, m3u, m4 p, mid, midi, mp3, ogg, rmi, snd, wav , wax, wma.
84 Administrator’s Guide SurfControl Web Filter v5.5 R ULES A DMINISTRATOR HTTP Deny Page Objects 7 HTTP D ENY P AGE O BJECTS HTTP Deny Page objects are Web pag es that a user will see when they have triggered a rule, for example if they try to access a site that is blocked.
SurfControl Web Filter v5.5 Administrator’s Guide 85 R ULES A DMINISTRATOR HTTP Deny Page Objects 7 You can edit the text from within the obj ect. See "Constructin g HTTP Deny Pages" on page 86 for restrictions applying to editing or constructin g deny pages.
86 Administrator’s Guide SurfControl Web Filter v5.5 R ULES A DMINISTRATOR HTTP Deny Page Objects 7 Figure 7-27 Allowance HTTP Deny Web page From the dialog box you have th e following options.
SurfControl Web Filter v5.5 Administrator’s Guide 87 R ULES A DMINISTRATOR Viewing Anoth er Collector 7 V IEWING A NOTHER C OLLECTOR If you have more than on e collector on your ne twork, yo u can quickly ch ange to a d if f erent o ne fr om within the Rules Administrator .
88 Administrator’s Guide SurfControl Web Filter v5.5 R ULES A DMINISTRATOR Viewing Anoth er Collector 7.
Chapter 8 Real Time Monitor Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . page 90 Display Columns . . . . . . . . . . . . . . . . . . . . . . . . . . . .
90 Administrator’s Guide SurfControl Web Filter v5.5 R EAL T IME M ONITOR Introduction 8 I NTRODUCTION The Real-Time Monitor shows Internet activity on your ne twork as it is happening. T his is diff erent from the Monitored Data in the Web Filter Ma nager , whic h displays historic info rmation that has been saved in yo ur database.
SurfControl Web Filter v5.5 Administrator’s Guide 91 R EAL T IME M ONITOR Introduction 8 Other columns can be configured via the Options menu. Select General from the Options menu.
92 Administrator’s Guide SurfControl Web Filter v5.5 R EAL T IME M ONITOR Display Columns 8 D ISPLAY C OLUMNS Under Display Colu mn s, you can de fine which columns are displayed in the Real-Tim e Monitor window . Table 8-2 Real-Time Monitor columns * These columns are unavailable in the Privacy Edition of Web Filter .
SurfControl Web Filter v5.5 Administrator’s Guide 93 R EAL T IME M ONITOR Category Color 8 C ATEGORY C OLOR This option allows you to assign a co lor to a SurfControl Cate gory . This can aid you in spottin g trends in surfing habits in the Real-Time Monitor .
94 Administrator’s Guide SurfControl Web Filter v5.5 R EAL T IME M ONITOR Collector Details 8 C OLLECTOR D ETAILS You can view informa tion about the Real-Time Mon itor connector by selecting Collector Details from the Options menu.
SurfControl Web Filter v5.5 Administrator’s Guide 95 R EAL T IME M ONITOR Stopping and Starting the Real-Tim e Monitor 8 S TOPPING AND S TARTING THE R EAL -T IME M ONITOR If there is a lot of traffi c be ing de tected by the Real-T im e Monitor , you can temporarily stop the tra ffic.
96 Administrator’s Guide SurfControl Web Filter v5.5 R EAL T IME M ONITOR Stopping and Sta rtin g the Real-Time Monitor 8.
Chapter 9 Web Filter Settings Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . page 98 A vail able Settings . . . . . . . . . . . . . . . . . . . . . . . .
98 Administrator’s Guide SurfControl Web Filter v5.5 W EB F ILTER S ETTINGS Introduction 9 I NTRODUCTION You can configure how SurfContr ol Web Filter monitors a nd filters Internet traffic, by configuring the Web Filter service settings.
SurfControl Web Filter v5.5 Administrator’s Guide 99 W EB F ILTER S ETTINGS Available Settings 9 A VAILABLE S ETTINGS To configure the Web Filter service settings, open th e Web Filter Settin gs dialog box as shown below: Figure 9-1 Web Filter service Settings You can use this dialog box to: • Start, stop and restart the Web Filter service.
100 Administrator’s Guide SurfC ontrol Web Filter v5.5 W EB F ILTER S ETTINGS Start/Stop Service Tab 9 S TART /S TOP S ERVICE T AB Before applying changes to the service and monitor ed data se ttings, the ser vice ne eds to be stopped. For further details, see "Monitored Data " on page 34 .
SurfControl Web Filter v5.5 Administrator’s Guide 101 W EB F ILTER S ETTINGS Active Directory Tab 9 A CTIVE D IRECTORY T AB By default, connection to your Activ e Directory server is via a non-secured LDAP conne ction . You can change this to a secure SSL connection using port 63 6 from this tab.
102 Administrator’s Guide SurfC ontrol Web Filter v5.5 W EB F ILTER S ETTINGS Subnets Tab 9 S UBNETS T AB You can hel p your Web Filt er server wo rk more effici ently by using the Subnets tab to help balance the load. Figure 9-4 Subnets tab The Subnets tab has two sections.
SurfControl Web Filter v5.5 Administrator’s Guide 103 W EB F ILTER S ETTINGS Subnets Tab 9 6 Repeat steps 1 to 5 for other subnets you do not want to monitor .
104 Administrator’s Guide SurfC ontrol Web Filter v5.5 W EB F ILTER S ETTINGS Advanced Tab 9 A DVANCED T AB From the Advanced tab you can define th e following: • Network Settings • TCP/IP Name .
SurfControl Web Filter v5.5 Administrator’s Guide 105 W EB F ILTER S ETTINGS Advanced Tab 9 TCP/IP N AME R ESOLUTION (DNS) These settings af fect how SurfControl Web Filter resolves Domain name s: • Workstation name resolution - Determines a workstation na me based on IP address.
106 Administrator’s Guide SurfC ontrol Web Filter v5.5 W EB F ILTER S ETTINGS Categorizat ion Tab 9 C ATEGORIZATION T AB Web destinations se en by W eb Filte r ar e as sig ned to a category in the SurfCo ntrol Web Filter Inter net Threat Databa se.
SurfControl Web Filter v5.5 Administrator’s Guide 107 W EB F ILTER S ETTINGS Protocol Signatures Tab 9 P ROTOCOL S IGNATURES T AB The Protocol Signatures tab give s you the ability to enable signat ure scanning for certain Instant Messenger , P2P and We b accelerator protocols.
108 Administrator’s Guide SurfC ontrol Web Filter v5.5 W EB F ILTER S ETTINGS Ignored Ports Tab 9 I GNORED P ORTS T AB Web Filter detects ne two rk traffic throug h the dr ive r an d pa sses the info rm a tio n to the Web Filt er serv ice , even though you may have ch osen not to monitor certai n protocols in the monitor setting s.
SurfControl Web Filter v5.5 Administrator’s Guide 109 W EB F ILTER S ETTINGS Ignored Ports Tab 9 C REATING NEW PORTS You can add either single p orts or a range of ports to the Ignored Ports list. To create a new port entry: 1 On the Ignored Ports tab, click New .
110 Administrator’s Guide SurfC ontrol Web Filter v5.5 W EB F ILTER S ETTINGS Ignored Ports Tab 9 These settings af fect how Web Filter monitors users: • None - If selected, SurfControl monitors users based on workstation name or IP addr ess.
SurfControl Web Filter v5.5 Administrator’s Guide 111 W EB F ILTER S ETTINGS Real-Time Monitor Tab 9 R EAL -T IME M ONITOR T AB This tab displays the co nnection det ails for the Real-Time Monitor .
112 Administrator’s Guide SurfC ontrol Web Filter v5.5 W EB F ILTER S ETTINGS Database Tab 9 D ATABASE T AB The Database tab shows the current da tabase being used for Monitoring , and Rules and Clients in Web Filter . The default database name is SurfCont rol_Web Filter .
SurfControl Web Filter v5.5 Administrator’s Guide 113 W EB F ILTER S ETTINGS Database Tab 9 4 Click Options to expand the login dialog box. 5 Select the database you want to connect to. 6 Add an Applic ation Name to id entify the database and click OK .
114 Administrator’s Guide SurfC ontrol Web Filter v5.5 W EB F ILTER S ETTINGS E-mail Notifications Tab 9 E- MAIL N OTIFICATIONS T AB During installation you were asked to give the fo llowing informa.
SurfControl Web Filter v5.5 Administrator’s Guide 115 W EB F ILTER S ETTINGS E-mail Notifications Tab 9 You can sele ct these optio ns on the E- mail Notification tab as show n below: Figure 9-11 E-.
116 Administrator’s Guide SurfC ontrol Web Filter v5.5 W EB F ILTER S ETTINGS E-mail Notifications Tab 9.
Chapter 10 Custom Categorization Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . p age 1 18 How It Works . . . . . . . . . . . . . . . . . . . . . . . . .
118 Administrator’s Guide SurfC ontrol Web Filter v5.5 C USTOM C ATEGORIZATION Introduction 10 I NTRODUCTION Custom categorization uses SurfCo ntrol’s Virtual Control Agent™ (VCA) technology . The VCA evaluates unknown Web destinations, reading an d analyzing c ontent p age by page.
SurfControl Web Filter v5.5 Administrator’s Guide 119 C USTOM C ATEGORIZATION Using Custom Catego ri zation 10 U SING C USTOM C ATEGORIZATION To open the VCA from the Web Filter Manager , select Con.
120 Administrator’s Guide SurfC ontrol Web Filter v5.5 C USTOM C ATEGORIZATION Using Custom Cate gorization 10 The Monitored De stinations panel shows the current list of desti nations in the Moni tor database. Click any of the column he adings t o sort by that data.
SurfControl Web Filter v5.5 Administrator’s Guide 121 C USTOM C ATEGORIZATION Using Custom Catego ri zation 10 • Find Destination - Allows you to search for a URL in the Monitored Destinations or VCA / Manual Categorizations panels.
122 Administrator’s Guide SurfC ontrol Web Filter v5.5 C USTOM C ATEGORIZATION Using Custom Cate gorization 10 • Retrieve pages from cach e - Enables the VCA to use locally cached versions of pages of a destination, rather than ha ving to retrieve current versions from the Internet.
SurfControl Web Filter v5.5 Administrator’s Guide 123 C USTOM C ATEGORIZATION Using Custom Catego ri zation 10 • Italian • Spanish 4S e l e c t Show Results to view the results in the window below , or Purge Results to remove the results from the window below .
124 Administrator’s Guide SurfC ontrol Web Filter v5.5 C USTOM C ATEGORIZATION Using Custom Cate gorization 10 3 Click OK . An Action Complete dialog box d i splays, confirming the number of destination s checked and Categorize d.
SurfControl Web Filter v5.5 Administrator’s Guide 125 C USTOM C ATEGORIZATION Using Custom Catego ri zation 10 Figure 10-5 VCA Settings tab You can perform the following tasks on the VCA Settings tab: • Select Collector - Select the server (collector) you want the VCA to save its categorizations to.
126 Administrator’s Guide SurfC ontrol Web Filter v5.5 C USTOM C ATEGORIZATION Using Custom Cate gorization 10 • Max Threads - This con tr ols the ma xim um numbe r of spid ers th at can be cate gorizing d estination s at any one time. The default number is 8.
Chapter 1 1 Databases Creating a New SQL Server Database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . page 128 Managing databases . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
128 Administrator’s Guide SurfC ontrol Web Filter v5.5 D ATABASES Creating a New SQL Server Databa se 11 C REATING A N EW SQL S ERVER D ATABASE If you wish to create a new SQL Server database fo r Web Filter , use the SurfControl Database Creation Wizard.
SurfControl Web Filter v5.5 Administrator’s Guide 129 D ATABASES Managing data bases 11 M ANAGING DATABASES As SurfControl Web Filter builds up its database of Intern et traf fic, yo u need to consider how to manage the volume of data it contains. Web Filter has a database managem ent tool t hat enables you to manage your data ef ficiently .
130 Administrator’s Guide SurfC ontrol Web Filter v5.5 D ATABASES Managing databas es 11 A RCHIVE Archiving your database, impr oves system performance by red ucing its size and optimizing storage.
SurfControl Web Filter v5.5 Administrator’s Guide 131 D ATABASES Managing data bases 11 C OMPACT Compacting your database elimina te s the redundant space con tained within it, reducing its size.
132 Administrator’s Guide SurfC ontrol Web Filter v5.5 D ATABASES Managing databas es 11 R ESTORE Restore enables you to vi ew an d repo rt on an arch ived datab ase usin g the Sur fContro l Web Filte r Monito r . To Restore an Ar chived Database: 1 Stop the Web Filter serv ice.
SurfControl Web Filter v5.5 Administrator’s Guide 133 D ATABASES Managing data bases 11 7S e l e c t Set as Defau lt Database for the Web Filter service to use the restored data base for writin g to. 8 Click Restore . A message d isplays, confir ming the r estore has been succe ssful.
134 Administrator’s Guide SurfC ontrol Web Filter v5.5 D ATABASES Updating Your Database 11 U PDATING Y OUR D ATABASE There are two meth o ds for ma n ua lly up datin g th e da ta ba se fro m th e flat files th at ar e cr ea te d by the Monitor .
SurfControl Web Filter v5.5 Administrator’s Guide 135 D ATABASES Updating Your Databas e 11 6 Select the Server that contains the database from the drop down list box: 7 If the server requres a Login ID and Password en ter this information to log into the server .
136 Administrator’s Guide SurfC ontrol Web Filter v5.5 D ATABASES Upgrading your da tab a se 11 U PGRADING YOUR DATABASE 1 Download the latest database fr om the SurfControl web site. 2S e l e c t Start > All Programs > SurfControl Web Filter > Database Tools > Dat abase Upgrade Tool .
SurfControl Web Filter v5.5 Administrator’s Guide 137 D ATABASES Importing/ exporting databa ses 11 I MPORTING / EXPORTING DATABASES If you have categorized sites manua lly you can import these sites from an existing database, then e xport to these sites to a new blan k database.
138 Administrator’s Guide SurfC ontrol Web Filter v5.5 D ATABASES Importing/exportin g da ta ba s es 11 I MPORTING MANUALLY CATEGORIZED SITES To import your manual categorizations: 1S e l e c t Start > SurfControl Web Filter > Database Tools > Import or Export Manual Categorizations .
Chapter 12 Scheduler Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . page 140 A vail able Events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
140 Administrator’s Guide SurfC ontrol Web Filter v5.5 S CHEDULER Introduction 12 I NTRODUCTION You can schedule certain events that consume high ba ndwidth or that need users to be logged off th e network to take place at a convenient tim e .
SurfControl Web Filter v5.5 Administrator’s Guide 141 S CHEDULER Introduction 12 5 Enter a name for the event in the Description field. 6 Click Configure . Depending on the event chos en, a dialog box will appear . 7 Once you have completed the details in the dialo g box, click OK .
142 Administrator’s Guide SurfC ontrol Web Filter v5.5 S CHEDULER Availabl e Ev en ts 12 A VAILABLE E VENTS You can set up the fo llowing events in the Scheduler: • Command Line • Database Manag.
SurfControl Web Filter v5.5 Administrator’s Guide 143 S CHEDULER Available Events 12 4 Click Configure . The Database Management di alog box will be displayed. Th e default database is shown in the Databa se field. 5 If you wish to run the event on a dif ferent databa se, click Select to choose a diff erent database.
144 Administrator’s Guide SurfC ontrol Web Filter v5.5 S CHEDULER Availabl e Ev en ts 12 I NTERNET T HREAT D ATABASE U PDATE Your Internet Thre at Database is important in helping you to identify the nature of Web destinations bein g accessed on your network.
Appendix Contact Technical Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . page 146 Sales and Feedback . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
146 Administrator’s Guide SurfC ontrol Web Filter v5.5 A PPENDIX Contact Technical Support C ONTACT T ECHNICAL S UPPORT Websense p rovides technic al informa tion about Su rfControl pr oducts online.
SurfControl Web Filter v5.5 Administrator’s Guide 147 A PPENDIX Contact Technical Suppor t If your issue is urgent, please call one of the of fices listed below . You will be routed to the first availabl e technician, who will gladly assist you. For the latest support infor mation on SurfControl products, visit www .
148 Administrator’s Guide SurfC ontrol Web Filter v5.5 A PPENDIX Sales and Feedback S ALES AND F EEDBACK For product and pricing info rmation, or to place an order , contact Websense. To find your nearest Websense office , please visit our web site: www .
149 Administrator’s Guide SurfC ontrol Web Filter v5.5 I NDEX A Active Direc tory LDAP connection 101 SSL connection 101 Active Direc tory Domain Object 60 After work object 75 Allowance Objects 10M.
SurfControl Web Filter v5.5 Administrator’s Guide 150 Data 34 Destinations 45 Filters 34 Users 36 Monitored Destinations object 64 N NetBIOS 110 NetWare Domain object 60 Network Settings 104 Notify .
Un point important après l'achat de l'appareil (ou même avant l'achat) est de lire le manuel d'utilisation. Nous devons le faire pour quelques raisons simples:
Si vous n'avez pas encore acheté Surf Control 5.5 c'est un bon moment pour vous familiariser avec les données de base sur le produit. Consulter d'abord les pages initiales du manuel d'utilisation, que vous trouverez ci-dessus. Vous devriez y trouver les données techniques les plus importants du Surf Control 5.5 - de cette manière, vous pouvez vérifier si l'équipement répond à vos besoins. Explorant les pages suivantes du manuel d'utilisation Surf Control 5.5, vous apprendrez toutes les caractéristiques du produit et des informations sur son fonctionnement. Les informations sur le Surf Control 5.5 va certainement vous aider à prendre une décision concernant l'achat.
Dans une situation où vous avez déjà le Surf Control 5.5, mais vous avez pas encore lu le manuel d'utilisation, vous devez le faire pour les raisons décrites ci-dessus,. Vous saurez alors si vous avez correctement utilisé les fonctions disponibles, et si vous avez commis des erreurs qui peuvent réduire la durée de vie du Surf Control 5.5.
Cependant, l'un des rôles les plus importants pour l'utilisateur joués par les manuels d'utilisateur est d'aider à résoudre les problèmes concernant le Surf Control 5.5. Presque toujours, vous y trouverez Troubleshooting, soit les pannes et les défaillances les plus fréquentes de l'apparei Surf Control 5.5 ainsi que les instructions sur la façon de les résoudre. Même si vous ne parvenez pas à résoudre le problème, le manuel d‘utilisation va vous montrer le chemin d'une nouvelle procédure – le contact avec le centre de service à la clientèle ou le service le plus proche.
