M86 Security M86 Web Filter User manual

M86 Web Filter
USER GUIDE
Software Version: 4.0.10
Document Version: 06.08.10

II M86 SECURITY USER GUIDE
M86 WEB FILTER USER GUIDE
© 2010 M86 Security
All rights reserved.
828 W. Taft Ave., Orange, CA 92865, USA
Version 1.01, published June 2010 for software release 4.0.10
Printed in the United States of America
This document may not, in whole or in part, be copied, photo-
copied, reproduced, translated, or reduced to any electronic
medium or machine readable form without prior written con-
sent from M86 Security.
Every effort has been made to ensure the accuracy of this
document. However, M86 Security makes no warranties with
respect to this documentation and disclaims any implied war-
ranties of merchantability and fitness for a particular purpose.
M86 Security shall not be liable for any error or for incidental
or consequential damages in connection with the furnishing,
performance, or use of this manual or the examples herein.
Due to future enhancements and modifications of this product,
the information described in this documentation is subject to
change without notice.
The latest version of this document can be obtained from
http://www.m86security.com/support/R3000/documenta-
tion.asp
Trademarks
Other product names mentioned in this manual may be trade-
marks or registered trademarks of their respective companies
and are the sole property of their respective manufacturers.
Part# R3000-UG_v1.01-1006

M86 SECURITY USER GUIDE iii
CONTENTS
I NTRODUCTORY S ECTION .................................................. 1
Web Filter ..................................................................................... 1
About this User Guide ................................................................1
How to Use this User Guide .......................................................3
Conventions ...................................................................................... 3
Terminology ...................................................................................... 4
Overview ...................................................................................... 9
Environment Requirements ..................................................... 10
Workstation Requirements .............................................................. 10
Administrator ............................................................................ 10
End User ................................................................................... 11
Network Requirements .................................................................... 11
Chapter 1: Filtering Operations ............................................... 12
Operational Modes .......................................................................... 12
Invisible Mode ........................................................................... 13
Router Mode ............................................................................. 15
Firewall Mode ........................................................................... 16
Group Types ................................................................................... 18
Global Group ............................................................................ 18
IP Groups . ................................................................................ 19
Filtering Profile Types ..................................................................... 20
Static Filtering Profiles . ............................................................. 22
Master IP Group Filtering Profile......................................... 22
IP Sub-Group Filtering Profile ............................................. 22
Individual IP Member Filtering Profile ................................. 22
Active Filtering Profiles . ............................................................ 23
Global Filtering Profile......................................................... 23
Override Account Profile ..................................................... 23
Time Profile ......................................................................... 23
Lock Profile ......................................................................... 23
Filtering Profile Components ........................................................... 24
Library Categories . ................................................................... 25

CONTENTS
iv M86 SECURITY USER GUIDE
M86 Supplied Categories.................................................... 25
Custom Categories ............................................................. 25
Service Ports . ........................................................................... 26
Rules ........................................................................................ 26
Minimum Filtering Level ............................................................ 26
Filter Settings ............................................................................ 27
Filtering Rules ................................................................................. 28
Filtering Levels Applied ............................................................ 28
Chapter 2: Logging and Blocking ............................................ 31
Web Access Logging ...................................................................... 31
Instant Messaging, Peer-to-Peer Blocking ...................................... 31
How IM and P2P Blocking Works ............................................. 31
IM Blocking.......................................................................... 31
P2P Blocking....................................................................... 32
Setting up IM and P2P .............................................................. 33
Using IM and P2P ..................................................................... 33
Block IM, P2P for All Users ................................................ 34
Block IM for All Users ................................................... 34
Block P2P for All Users................................................. 34
Block Specified Entities from Using IM, P2P ...................... 35
Block IM for a Specific Entity ........................................ 35
Block P2P for a Specific Entity ..................................... 35
Chapter 3: Synchronizing Multiple Units ................................ 36
Web Filter Synchronization ............................................................. 36
Synchronization Setup .................................................................... 38
Setting up a Source Server ...................................................... 38
Setting up a Target Server ....................................................... 38
Types of Synchronization Processes .............................................. 39
Filtering Profile Synchronization Process ................................. 39
Library Synchronization Process .............................................. 40
Delays in Synchronization ............................................................... 41
Synchronized, Non-Synchronized Items ......................................... 42
Synchronize All Items . .............................................................. 43
Synchronized Items (All) ..................................................... 43
Functionally Synchronized Items ........................................ 43
Non-synchronized Items .................................................... 44
Synchronize Only Library Items ................................................ 45
Synchronized Items (Library Only)...................................... 45
Functionally Synchronized Items ........................................ 45

CONTENTS
M86 SECURITY USER GUIDE v
Non-synchronized Items ..................................................... 45
Server Maintenance Procedures ..................................................... 47
Source Server Failure Scenarios .............................................. 47
Establish Backup Procedures ................................................... 47
Use a Backup File to Set up a Source Server .......................... 48
Set up a Target Server as a Source Server ........................ 48
Set up a Replacement Target Server ................................. 49
Set up a New Source Server from Scratch ............................... 49
Set up a Target Server as a Source Server ........................ 49
Chapter 4: Getting Started ....................................................... 50
Initial Setup ..................................................................................... 50
Access the Administrator Console .................................................. 50
Log On ...................................................................................... 50
Last Library Update message ............................................. 52
Navigation Tips ......................................................................... 54
Access Main Sections ......................................................... 54
Help Features ..................................................................... 56
Access Help Topics ...................................................... 56
Tooltips ......................................................................... 57
Screen and Window Navigation ......................................... 59
Topic Links.................................................................... 59
Select Sub-topics.......................................................... 60
Navigate a Tree List...................................................... 61
Tree List Topics and Sub-topics ................................... 62
Navigate a Window with Tabs ...................................... 63
Console Tips and Shortcuts ............................................... 64
Navigation Path ............................................................ 64
Refresh the Console ..................................................... 64
Select Multiple Items..................................................... 65
Copy and Paste Text .................................................... 65
Calculate IP Ranges without Overlaps ......................... 66
Re-size the User Interface ............................................ 67
Log Off ...................................................................................... 68
G LOBAL A DMINISTRATOR S ECTION .................................. 69
Introduction ............................................................................... 69
Chapter 1: System screen ........................................................ 70
Control ............................................................................................. 72

CONTENTS
vi M86 SECURITY USER GUIDE
Filter window ............................................................................. 72
Local Filtering...................................................................... 73
Disable Local Filtering Options ..................................... 73
Enable Local Filtering Options...................................... 74
HTTP Filtering ..................................................................... 74
Enable HTTP Packet Splitting Detection ...................... 74
Disable HTTP Packet Splitting Detection ..................... 74
HTTPS Filtering .................................................................. 75
Service Control.................................................................... 76
Enable Pattern Blocking ............................................... 76
Disable Pattern Blocking............................................... 77
Target(s) Filtering................................................................ 77
Disable Filtering on Target Servers .............................. 77
Enable Filtering on Target Servers ............................... 77
Block Page Authentication window ........................................... 78
Enter, Edit Block Page Options .......................................... 79
Block page .......................................................................... 80
Options page....................................................................... 82
Option 2 ........................................................................ 83
Option 3 ........................................................................ 84
ShutDown window . ................................................................... 85
Shut Down the Server ......................................................... 85
Reboot window . ........................................................................ 86
Reboot the Server ............................................................... 86
Network ........................................................................................... 88
LAN Settings window ................................................................ 88
Specify LAN Settings ......................................................... 89
NTP Servers window . ............................................................... 90
Specify Network Time Protocol Servers ............................. 91
Add an NTP Server....................................................... 91
Remove an NTP Server................................................ 91
Regional Setting window . ......................................................... 92
Specify the Time Zone, Language Set................................ 92
Block Page Route Table window .............................................. 93
Add a Router ...................................................................... 94
Remove a Router ................................................................ 94
Administrator ................................................................................... 95
Administrator window ............................................................... 95
View Administrator Accounts .............................................. 96
Add an Administrator Account............................................. 96
Edit an Administrator Account ............................................ 97

CONTENTS
M86 SECURITY USER GUIDE vii
Delete an Administrator Account......................................... 97
Secure Logon .................................................................................. 98
Logon Settings window ............................................................. 98
Enable, Disable Password Expiration ................................. 99
Enable, Disable Account Lockout .................................... 100
Logon Management ................................................................ 102
View User Account Status, Unlock Username ................. 103
View Account Status................................................... 103
Unlock a Username .................................................... 104
View Locked IP Address, Unlock IP Address.................... 104
View Locked IPs ......................................................... 104
Unlock an IP Address ................................................. 104
View Admin, Sub Admin User Interface Access .............. 105
Diagnostics .................................................................................... 106
System Command window ..................................................... 106
Perform a Diagnostic Test, View Data ............................. 107
Command Selections ........................................................ 108
Ping............................................................................. 108
Trace Route ................................................................ 108
Process list ................................................................. 108
TOP CPU processes ..................................................109
NIC configuration ........................................................ 109
Active connections...................................................... 109
Routing table............................................................... 109
Current memory usage ............................................... 110
CPU usage ................................................................. 110
System performance................................................... 110
Recent logins .............................................................. 110
System uptime ............................................................ 111
df(disk usage) ............................................................. 111
dmesg(print kernel ring buffer).................................... 111
View Log File window . ............................................................ 112
View Log Results .............................................................. 112
Troubleshooting Mode window ............................................... 114
Use the Troubleshooting Mode ........................................ 115
Active Profile Lookup window ................................................. 116
Verify Whether a Profile is Active ..................................... 117
Admin Audit Trail window ....................................................... 120
Admin Audit Trail............................................................... 120
Specify FTP Criteria....................................................121
FTP the Log on Demand ............................................121

CONTENTS
viii M86 SECURITY USER GUIDE
View ................................................................................. 122
View the Log of Administrator Changes .....................122
Alert ............................................................................................... 123
Alert Settings window ............................................................. 123
Enable the Alert Feature .................................................. 125
Modify Alert Settings ......................................................... 125
Disable the Alert Feature .................................................. 125
SMTP Server Settings window . .............................................. 126
Enter, Edit SMTP Server Settings ..................................... 126
Verify SMTP Settings ........................................................ 127
Software Update ........................................................................... 128
Local Software Update window .............................................. 128
Read Information about a Software Update...................... 129
Select and Apply a Software Update ................................ 129
Undo an Applied Software Update ................................... 132
Software Update Log window ................................................. 132
View Log Contents ............................................................ 133
Download Log, View, Print Contents................................. 133
Download the Log....................................................... 133
View the Contents of the Log...................................... 134
Save, Print the Log File Contents............................... 136
Synchronization ............................................................................. 137
Setup window . ........................................................................ 138
Using Only One Web Filter on the Network ..................... 139
Using More than One Web Filter on the Network ............. 139
Set up a Web Filter to be a Source Server................. 139
Sync All Target Servers with the Same Settings ........ 142
Set up a Web Filter to be a Target Server.................. 143
Status window . ....................................................................... 145
View the Sync Status of Targets from the Source ........... 146
View Items in the Queue............................................. 146
View Items Previously Synced to the Server .............. 147
Place Items in Queue for Syncing..................................... 148
View the Sync Status of the Target Server ....................... 148
Mode ............................................................................................. 150
Operation Mode window ......................................................... 150
Set the Operation Mode ................................................... 151
Specify the Listening Device ............................................. 151
Specify the Block Page Device .........................................151
Invisible Option: Specify the Block Page Delivery.............152
ICAP Option: Specify ICAP Server Settings ..................... 153

CONTENTS
M86 SECURITY USER GUIDE ix
Mobile Options: Specify the Mobile Client Control ........... 155
Apply Operation Mode Settings ........................................ 155
Proxy Environment Settings window ...................................... 155
Use a Local Proxy Server ................................................. 156
Use Proxy Port 80 ............................................................. 156
Authentication ............................................................................... 157
Backup/Restore ............................................................................. 158
Backup/Restore window ......................................................... 158
Backup Procedures........................................................... 159
Perform a Backup on Demand ......................................... 160
Schedule a Backup .......................................................... 161
Configure FTP Server Settings................................... 161
Create a Backup Schedule.........................................162
Remove a Backup Schedule ...................................... 165
Download a File ............................................................... 166
Perform a Restoration ...................................................... 167
Upload a File to the Server......................................... 167
Restore Configurations to the Server ......................... 168
Remove a Backup File ...................................................... 168
View Backup and Restoration Details .............................. 169
Reset ............................................................................................. 170
Reset window ......................................................................... 170
Reset All Server Settings .................................................. 170
Radius Authentication Settings ..................................................... 171
Radius Authentication Settings window .................................. 171
Enable Radius................................................................... 172
Specify Radius Authentication Settings ...................... 172
Apply Settings............................................................. 173
Disable Radius .................................................................. 173
SNMP ............................................................................................ 174
SNMP window ........................................................................ 174
Enable SNMP.................................................................... 174
Specify Monitoring Settings .............................................. 175
Set up Community Token for Public Access............... 175
Create, Build the Access Control List ......................... 175
Maintain the Access Control List ................................ 175
Hardware Failure Detection .......................................................... 176
Hardware Failure Detection window ....................................... 176
View the Status of the Hard Drives ................................... 176
X Strikes Blocking ......................................................................... 177
X Strikes Blocking window ...................................................... 177

CONTENTS
xM86 SECURITY USER GUIDE
Configuration..................................................................... 178
Set up Blocking Criteria .............................................. 178
Reset All Workstations................................................ 179
Lock Page................................................................... 180
Overblocking or Underblocking................................... 181
Email Alert......................................................................... 182
Set up Email Alert Criteria .......................................... 182
Set up Email Alert Recipients ..................................... 183
Remove Email Alert Recipients .................................. 184
Logon Accounts ................................................................ 184
Set up Users Authorized to Unlock Workstations ....... 184
Deactivate an Authorized Logon Account................... 185
Delete a Logon Account ............................................. 185
Categories......................................................................... 186
Set up Categories to Receive Strikes or No Strikes ... 186
Go to X Strikes Unlock Workstation GUI .......................... 187
Re-login window ......................................................... 187
X Strikes Unlock Workstation ........................................... 188
Unlock a Workstation.................................................. 188
Set up an Email Address to Receive Alerts ................ 190
Remove an Email Address from the Alert List............ 190
Close the Pop-up Window .......................................... 190
Warn Option Setting ......................................................................191
Warn Option Setting window ..................................................191
Specify Interval for Re-displaying the Warn page ............. 192
Customization ............................................................................... 193
Common Customization window . ...........................................194
Enable, Disable Features ................................................. 195
Lock Page Customization window .......................................... 197
Edit Entries, Setting .......................................................... 198
Preview Sample Lock Page ............................................. 199
Block Page Customization window ......................................... 200
Add, Edit Entries ............................................................... 201
Preview Sample Block Page ............................................ 202
Warn Page Customization window . ........................................ 204
Add, Edit Entries .............................................................. 205
Preview Sample Warning Page .......................................206
Profile Control window ............................................................ 208
Edit Entries........................................................................ 209
Quota Block Page Customization window . ............................. 210
Add, Edit Entries ............................................................... 210