Manuel d'utilisation / d'entretien du produit v5.5 du fabricant Surf Control
Aller à la page of 77
™ SurfControl W eb Filter Starter Guide V ersion 5.5.
SurfControl Web Filter v5.5 Starter Guide i Notices N OTICES ©1996–2008, Websense Inc. All rights reserved. 10240 Sorrento V alley Rd., San Diego, CA 92121, USA Published January 2008 This document.
ii Starter Guide SurfControl Web Filter v5.5 Notices.
SurfControl Web Filter for ISA v5.5 Starter Guide iii T ABLE OF C ONTENTS Notices ................. ................ ................ ................ ................ .................... ................ ........................ i Introduction .....
iv Starter Guide SurfControl Web Filter for ISA v5.5 Network Dependent ...... .................... ................ ................ ................... ................ ............ 52 User Name Resolution .............. ... .... ... ... ... ........
Chapter 1 Introduction Microsof t ISA Server Edition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . page 2 System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
2 Starter Guide SurfControl Web Filter for ISA v5.5 I NTRODUCTION Microsoft ISA Server Edition 1 M ICROSOFT ISA S ERVER E DITION SurfControl Web Filter for ISA inte grates fully with Microso ft ISA server , in orde r to preve nt web ba se d threats.
SurfControl Web Filter for ISA v5.5 Starter Guide 3 I NTRODUCTION System Requiremen ts 1 S YSTEM R EQUIREMENTS The minimum and recomme nded specif ications for installing SurfCont rol Web Filter and SurfControl Report Cen tral are descr ibed in the sec tions below .
4 Starter Guide SurfControl Web Filter for ISA v5.5 I NTRODUCTION System Requirements 1 G ENERAL S YSTEM R EQUIREMENTS The recommended ge neral specifications for your Web Filter installa tion are sho.
SurfControl Web Filter for ISA v5.5 Starter Guide 5 I NTRODUCTION System Requiremen ts 1 SQL S ERVER L ICENSING If you have purcha sed SQL Server under a Ser ver plus Device CALs, or a Server plus Use.
6 Starter Guide SurfControl Web Filter for ISA v5.5 I NTRODUCTION System Requirements 1.
Chapter 2 Inst allation Decisions Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . page 8 Network Considerations . . . . . . . . . . . . . . . . . . . . . . .
8 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLATION D ECISIONS Introduction 2 I NTRODUCTION There are cert ain decisions you must make before you star t to inst all SurfControl Web Filter , based on the design of your network.
SurfControl Web Filter for ISA v5.5 Starter Guide 9 I NST ALL ATION D ECISIONS Network Consid erations 2 N ETWORK C ONSIDERATIONS Y ou can install SurfContro l on a single ISA Server or in multi-server arrays. In an ISA S tandard Edition installation, W eb Filter is installed on a single ISA Server .
10 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLATION D ECISIONS Network Considerations 2 T o resolve an authentication issue: • Use a Local Admin account to log into the Web Filter server(s).
SurfControl Web Filter for ISA v5.5 Starter Guide 11 I NST ALL ATION D ECISIONS Firewall Po rt Configurati on 2 F IREWALL P ORT C ONFIGURATION Web Filter for ISA requires you to edit you r syste m policy to allow Web Filter to communicate across certain network port s.
12 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLATION D ECISIONS ISA Server Authentication 2 ISA S ERVER A UTHENTICATION Y ou can use ISA Se rver to authenti cate your users, if you don’t want to us e NetBIOS or EUM. This procedure is dif ferent, depending on whether you are using ISA Ser ver 2000 or 2004 and above.
SurfControl Web Filter for ISA v5.5 Starter Guide 13 I NST ALL ATION D ECISIONS User Name Resolution 2 U SER N AME R ESOLUTION By default, Sur fControl Web Filter doesn’t m onitor user na mes. The Configuration Wizard enables you to monitor your u s ers by name, in the following ways: • By using ISA Server to authenticate user names.
14 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLATION D ECISIONS User Name Resolution 2 M ETHODS OF I NSTALLING EUM Y ou can install EUM in one of two ways: 1 Install an EUM Agent on your domain controlle rs or Novell NetWare NDS T ree Server .
SurfControl Web Filter for ISA v5.5 Starter Guide 15 I NST ALL ATION D ECISIONS User Name Resolution 2 2 Fro m th e me n u, selec t Poli cies Audit . Ens ure that Au d it the se Even ts is checked. 3 En sure security lo gs are set t o overwrite as n eeded.
16 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLATION D ECISIONS User Name Resolution 2 N ET W ARE EUM Web Filter also e nables you to monitor users by t heir Nove ll NetW are user name. The Novell version of EUM is called NetWareEUM. NetW areEUM works in the same way as EUM.
SurfControl Web Filter for ISA v5.5 Starter Guide 17 I NST ALL ATION D ECISIONS User Name Resolution 2 Table 2-2 Logging Levels T HE EUM L OGIN A GENT The Login Agent enable s you to use the EUM without hav ing to inst all anything on your domain controllers .
18 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLATION D ECISIONS User Name Resolution 2 The EumLogin.ini file Below is a copy of the supplied .ini file [Surfcontrol_Servers] # The [Surfcontrol_Servers] section of the EumLogin.ini file is used to set the # server names to be used for each i nstance of SurfControl Web Filter.
SurfControl Web Filter for ISA v5.5 Starter Guide 19 I NST ALL ATION D ECISIONS User Name Resolution 2 How to configure the file The table be low describes the various sections of the Eu mLogin.ini file and how to enter your info rmation. Table 2-3 The EumLogin.
20 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLATION D ECISIONS User Name Resolution 2 Configuring a log on and logoff script Y ou need to create a new logon and logof f script, or modify an existing one, to call the EUM Login agent ( ScEumLoginAgent.
SurfControl Web Filter for ISA v5.5 Starter Guide 21 I NST ALL ATION D ECISIONS Database Consid erations 2 D ATABASE C ONSIDERATIONS Before you start to install Web Filter , you should decide: • Which datab ase platform you plan to use (SQL Server Express or SQL Ser v er).
22 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLATION D ECISIONS Database Cons id e ra ti ons 2 3 T ype the following: sqlcmd -S.sqlexpress 4 Y ou should get a prompt like this: 1> 5T y p e : Exit to exit sqlcmd 6 Open the SQL Computer Man ager .
SurfControl Web Filter for ISA v5.5 Starter Guide 23 I NST ALL ATION D ECISIONS Database Consid erations 2 Reasons to Install SQL Se rver on a Dedicated Server Use SQL Server 2000 or 2005 on a dedicat.
24 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLATION D ECISIONS Other Considerations 2 O THER C ONSIDERATIONS This section contains general info rmation that you should be aware of when installing and configuring SurfControl W eb Filter .
SurfControl Web Filter for ISA v5.5 Starter Guide 25 I NST ALL ATION D ECISIONS Other Cons iderations 2 Y ou can change the Customer Feedb ack and Company & Intranet settings From the Web Filter Settings in the Enterprise Manager . See the Administrator ’s Guide fo r mor e details.
26 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLATION D ECISIONS Other Considerations 2 Before installation, make sure the Remote Administration clie nt computer meets th e minimum requi.
Chapter 3 Inst alling W e b Filter Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . page 28 Inst all ing SQL Server Express (optional) . . . . . . . . . . . . .
28 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLING W EB F ILTER Introduction 3 I NTRODUCTION The following sections show you how to install W eb Filter Service Pack 3 along with instructions on how to install SQL Server an d W eb Filter ve rsion 5.
SurfControl Web Filter for ISA v5.5 Starter Guide 29 I NST ALLING W EB F ILTER Installing SQL Server Express (optiona l) 3 I NSTALLING SQL S ERVER E XPRESS ( OPTIONAL ) If you plan to use SQL Server Express for your database, you must insta ll it in the following order before installing Web Filter: 1 Download and install .
30 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLING W EB F ILTER Installing SurfControl W eb Filter 3 I NSTALLING S URF C ONTROL W EB F ILTER Y ou can cancel the installation of W e b Filter at any time by clicking Cancel . Y ou will have to restart the installation proces s if you decide to run the ins tall again at a later date.
SurfControl Web Filter for ISA v5.5 Starter Guide 31 I NST ALLING W EB F ILTER Installing SurfCo ntrol Web Filter 3 4 Click Next. 5 If the setup program does not detect a suitable da tabase, the Select Dat abase Insta llation Options is displayed. . 6 Y ou can now choo se one of th e following database o ptions: 7 Click Next .
32 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLING W EB F ILTER Installing SurfControl W eb Filter 3 8T h e Product T ype screen is displayed.
SurfControl Web Filter for ISA v5.5 Starter Guide 33 I NST ALLING W EB F ILTER Installing SurfCo ntrol Web Filter 3 12 Y ou will now see a screen giving you a summary of the installation opti ons you have chosen: Review your settings before st arting the installation.
34 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLING W EB F ILTER Installing SurfControl W eb Filter 3 14 Once the files are copied across an Install Wizard Comp lete screen will indicate that Web Filter has been successfully installed: Click Finish to close the setup program.
SurfControl Web Filter for ISA v5.5 Starter Guide 35 I NST ALLING W EB F ILTER Installing SurfCo ntrol Web Filter 3 C HANGES TO THE S ERVER The Web Filter setup program makes the following changes to the server: • Places the Web Filter icon in the Notification Area at startup.
36 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLING W EB F ILTER Configuring W eb Filter 3 C ONFIGURING W EB F ILTER The wizard will launch after you have fi nished the complete ins tallation pr ocess on your W eb Filter server . Perform the following steps.
SurfControl Web Filter for ISA v5.5 Starter Guide 37 I NST ALLING W EB F ILTER Configuring Web Filter 3 3T h e Customer Information screen is displaye d: Fill in your details to register with SurfControl. Registered us ers can sch edule live updates of the Internet Threat Database.
38 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLING W EB F ILTER Configuring W eb Filter 3 7 If you have entered a Web Filter license key , the Adaptive Threat Intelligence scre en is displayed: •S e l e c t Disable Anti-Virus Agent if you don’t wa nt to use the Anti-V irus Agent.
SurfControl Web Filter for ISA v5.5 Starter Guide 39 I NST ALLING W EB F ILTER Configuring Web Filter 3 10 The Select Database screen is displaye d: Fill in the fields as follows: • Server - Enter the name or IP address of the serve r where your SQL Server Exp ress, or SQL Server dat abase is located.
40 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLING W EB F ILTER Configuring W eb Filter 3 13 Click Next . 14 The Privacy Options screen is displayed.
SurfControl Web Filter for ISA v5.5 Starter Guide 41 I NST ALLING W EB F ILTER Configuring Web Filter 3 18 Y ou will now see the Corporate Network Detection Serv ice Configuration screen: This service.
42 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLING W EB F ILTER Configuring W eb Filter 3 21 The Automatic Dat abase Management screen is displayed: T o keep yo ur database working ef ficiently , select Archive and pur ge monitored traffic dat abase once a month .
SurfControl Web Filter for ISA v5.5 Starter Guide 43 I NST ALLING W EB F ILTER Configuring Web Filter 3 25 The E-mail Notifications screen is displayed: Web Filter can notify you w hen system events occur . Fill in the fields as follows: • E-mail Server: Enter the name or IP addre ss of the e-mail server for your domain.
44 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLING W EB F ILTER Configuring W eb Filter 3 27 The Categorization screen is displayed: 28 Select the Anonymously s end VCA and uncategorized dest ination information to Sur fControl check box, if you want to send uncategorize d we b site information anonymously to SurfCont rol.
SurfControl Web Filter for ISA v5.5 Starter Guide 45 I NST ALLING W EB F ILTER Configuring Web Filter 3 36 The User Name Resolution screen is displayed: By default, User Name Resolution is not selected.
46 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLING W EB F ILTER Configuring W eb Filter 3 • Username and Pas sword - Y ou need to enter a valid NDS tree username and p assword to enable W eb Filter to identify NetW are users. 39 Click Next .
SurfControl Web Filter for ISA v5.5 Starter Guide 47 I NST ALLING W EB F ILTER Configuring Web Filter 3 • If there is a serious problem with a task, you will see a failure icon next to it. If this happens, the Skip button will be disabled and you must go back to c orrect your settings.
48 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLING W EB F ILTER Installing Service Pack 3 3 I NSTALLING S ERVICE P ACK 3 This section contains information on Installing W eb Filter Service Pack 3. Y ou can cancel the installation at any time by clicking Cancel .
SurfControl Web Filter for ISA v5.5 Starter Guide 49 I NST ALLING W EB F ILTER Installing Service Pack 3 3 6 Y ou can now make a backup of your existing application datab ases using the Upgrade Option.
50 Starter Guide SurfControl Web Filter for ISA v5.5 I NST ALLING W EB F ILTER Installing Service Pack 3 3 9 Click Install to start the inst allation. A progress bar will indicate how the insta llation is progressing: 10 Y ou should now see the Inst all Wizard Complete screen : Choose when to restart th e compute r: now or later .
Chapter 4 Further Configuration Post Inst allation T asks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . page 52 User Name Resolution . . . . . . . . . . . . . . . . . . . . . . . . .
52 Starter Guide SurfControl Web Filter for ISA v5.5 F URTHER C ONFIGURATION Post Installation Tasks 4 P OST I NSTALLATION T ASKS Following the inst allation of Web Filter , there are a nu mber of tasks you may need to perform. Some apply to all installations, others are depend ent on your network configuration o r operating system set up.
SurfControl Web Filter for ISA v5.5 Starter Guide 53 F URTHER C ONFIGURATION User Name Resolution 4 U SER N AME R ESOLUTION By default, Su rfControl Web Filter r esolves user n ames by issuing a NetBIOS query based on the MAC address. W eb Filter also includes the Enterprise User Monitor (EUM) utility for resolving user names in a routed network.
54 Starter Guide SurfControl Web Filter for ISA v5.5 F URTHER C ONFIGURATION User Name Resolution 4 2T h e SurfControl Enterp rise User Monitoring Installatio n screen is displayed. Click Next . 3T h e Hostname screen is displayed. • Enter the IP address of the Web Filter serv er .
SurfControl Web Filter for ISA v5.5 Starter Guide 55 F URTHER C ONFIGURATION User Name Resolution 4 7T h e Ignore User Account s screen is displayed. Select the user account s who se logo n or logoff activity does not ne ed to be reported, for instance, Systems Management Server (SMS) and antiviru s accoun ts.
56 Starter Guide SurfControl Web Filter for ISA v5.5 F URTHER C ONFIGURATION User Name Resolution 4 The EUM Agent on the domain controller w ill wait te n minutes before checking for any changes made in the scua.ini file. The frequency of this can be changed by altering a regi stry setting on individual domain controllers.
SurfControl Web Filter for ISA v5.5 Starter Guide 57 F URTHER C ONFIGURATION User Name Resolution 4 • T o a dd a new W e b Filter server , type an entry underneath th e [surfCONTROL_Services] sectio.
58 Starter Guide SurfControl Web Filter for ISA v5.5 F URTHER C ONFIGURATION User Name Resolution 4 5 Press enter . Automatically loading the NetWare EUM T o auto matically load the NetW a re EUM every time th e server is res tarted, perform th e following st eps: 1 Edit the sys:systemautoexec.
SurfControl Web Filter for ISA v5.5 Starter Guide 59 F URTHER C ONFIGURATION Install SurfControl Report Central 4 I NSTALL S URF C ONTROL R EPORT C ENTRAL T o prod uce reports on the Internet traf fic monitored by W eb Filter , you need to inst all SurfControl Report Central, either as a download from http://www .
60 Starter Guide SurfControl Web Filter for ISA v5.5 F URTHER C ONFIGURATION Installing the Remote A dministration Client 4 I NSTALLING THE R EMOTE A DMINISTRATION C LIENT From the Remote Administration Client installation you can: • View monitored traf fic.
SurfControl Web Filter for ISA v5.5 Starter Guide 61 F URTHER C ONFIGURATION Installing the Remot e Administration Client 4 3T h e License Agreement sc reen is displayed. Select I accept the terms of th e licen s e ag re eme nt . 4 Click Next . 5T h e Select Dat a base In stallation Options screen is displayed.
62 Starter Guide SurfControl Web Filter for ISA v5.5 F URTHER C ONFIGURATION Installing the Remote A dministration Client 4 6T h e Product T ype screen is displayed. Select SurfContro l Web Filter . 7 Click Next . 8T h e Setup T ype screen is displayed.
SurfControl Web Filter for ISA v5.5 Starter Guide 63 F URTHER C ONFIGURATION Installing the Remot e Administration Client 4 10 The Select Server Platform T ype screen is displayed. Select Microsof t ISA Server . 1 1 Click Next . 12 The Installation Summary screen is displayed.
64 Starter Guide SurfControl Web Filter for ISA v5.5 F URTHER C ONFIGURATION Installing the Remote A dministration Client 4 13 The InstallShield Wizard Complete screen is displayed. 14 Click Finish . The Configurat ion Wizard will start automatically .
SurfControl Web Filter for ISA v5.5 Starter Guide 65 F URTHER C ONFIGURATION Firewall Policy Rules 4 F IREWALL P OLICY R ULES When installing W eb Filter on ISA Se rver 2004 or 2006 a nd Windows Serve.
66 Starter Guide SurfControl Web Filter for ISA v5.5 F URTHER C ONFIGURATION Firewall Po licy Rules 4 10 From the Connections tab, click LAN Settings . 1 1 Select Use a Proxy Server . 12 Select Bypas s proxy server for local addresses . 13 Click OK . 14 Click OK again to close the dialog box.
SurfControl Web Filter for ISA v5.5 Starter Guide 67 F URTHER C ONFIGURATION Firewall Policy Rules 4 11 E n t e r 1024 in the Port Range From field. 12 Enter 65535 in the Port R ange T o field. 13 Click OK , then Next . 14 Select No from the Secondary Connections screen.
68 Starter Guide SurfControl Web Filter for ISA v5.5 F URTHER C ONFIGURATION Firewall Po licy Rules 4 14 Select No from the Secondary Connections screen. Click Next . 15 Click Finish . 16 From the Add Prot oco ls dialog box, expand the User Defined folder and select th e Protocol you set up.
Appendix Cont act T echnical Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . page 70 Sales and Feedback . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
70 Starter Guide SurfControl Web Filter v5.5SurfControl Web Filter v5.5 A PPENDIX Contact T echnical Sup port C ONTACT T ECHNICAL S UPPORT Websense provides technical information about SurfControl pro.
SurfControl Web Filter v5.5SurfControl Web Filter v5.5 Starter Guide 71 A PPENDIX Contact Technical Support If your issue is urgent, please call one of the of fices listed below . Y ou will be routed to the first available technician, who will gladly assist you.
72 Starter Guide SurfControl Web Filter v5.5SurfControl Web Filter v5.5 A PPENDIX Sales and Feedback S ALES AND F EEDBACK For product and pricing info rmation, or to place an order , contact W ebsense. T o find your nea rest Websense of fice, please visit our web site: www .
Un point important après l'achat de l'appareil (ou même avant l'achat) est de lire le manuel d'utilisation. Nous devons le faire pour quelques raisons simples:
Si vous n'avez pas encore acheté Surf Control v5.5 c'est un bon moment pour vous familiariser avec les données de base sur le produit. Consulter d'abord les pages initiales du manuel d'utilisation, que vous trouverez ci-dessus. Vous devriez y trouver les données techniques les plus importants du Surf Control v5.5 - de cette manière, vous pouvez vérifier si l'équipement répond à vos besoins. Explorant les pages suivantes du manuel d'utilisation Surf Control v5.5, vous apprendrez toutes les caractéristiques du produit et des informations sur son fonctionnement. Les informations sur le Surf Control v5.5 va certainement vous aider à prendre une décision concernant l'achat.
Dans une situation où vous avez déjà le Surf Control v5.5, mais vous avez pas encore lu le manuel d'utilisation, vous devez le faire pour les raisons décrites ci-dessus,. Vous saurez alors si vous avez correctement utilisé les fonctions disponibles, et si vous avez commis des erreurs qui peuvent réduire la durée de vie du Surf Control v5.5.
Cependant, l'un des rôles les plus importants pour l'utilisateur joués par les manuels d'utilisateur est d'aider à résoudre les problèmes concernant le Surf Control v5.5. Presque toujours, vous y trouverez Troubleshooting, soit les pannes et les défaillances les plus fréquentes de l'apparei Surf Control v5.5 ainsi que les instructions sur la façon de les résoudre. Même si vous ne parvenez pas à résoudre le problème, le manuel d‘utilisation va vous montrer le chemin d'une nouvelle procédure – le contact avec le centre de service à la clientèle ou le service le plus proche.
