M86 Security Web Filter HL User manual

M86 Web Filter
USER GUIDE
Models: HL, SL, MSA / Software Version: 5.0.00
Document Version: 02.01.12

II M86 SECURITY USER GUIDE
M86 WEB FILTER USER GUIDE (HL, SL, MSA)
© 2012 M86 Security
All rights reserved.
Version 1.01, published February 2012 for software release
5.0.00
Printed in the United States of America
This document may not, in whole or in part, be copied, photo-
copied, reproduced, translated, or reduced to any electronic
medium or machine readable form without prior written con-
sent from M86 Security.
Every effort has been made to ensure the accuracy of this
document. However, M86 Security makes no warranties with
respect to this documentation and disclaims any implied war-
ranties of merchantability and fitness for a particular purpose.
M86 Security shall not be liable for any error or for incidental
or consequential damages in connection with the furnishing,
performance, or use of this manual or the examples herein.
Due to future enhancements and modifications of this product,
the information described in this documentation is subject to
change without notice.
The latest version of this document can be obtained from
http://www.m86security.com/support/R3000/documenta-
tion.asp
Trademarks
Other product names mentioned in this manual may be trade-
marks or registered trademarks of their respective companies
and are the sole property of their respective manufacturers.
Part# R3000-UG_v1.01-1202

M86 SECURITY USER GUIDE iii
CONTENTS
I NTRODUCTORY S ECTION .................................................. 1
Web Filter .....................................................................................1
About this User Guide ................................................................1
How to Use this User Guide .......................................................3
Conventions ......................................................................................3
Terminology ......................................................................................4
Overview ......................................................................................9
Environment Requirements .....................................................10
Workstation Requirements ..............................................................10
Administrator ............................................................................10
End User ...................................................................................11
Network Requirements ....................................................................11
Chapter 1: Filtering Operations ...............................................12
Operational Modes ..........................................................................12
Invisible Mode ...........................................................................13
Router Mode .............................................................................15
Firewall Mode ...........................................................................16
Group Types ...................................................................................18
Global Group ............................................................................18
IP Groups . ................................................................................19
Filtering Profile Types .....................................................................20
Static Filtering Profiles ..............................................................22
Master IP Group Filtering Profile.........................................22
IP Sub-Group Filtering Profile.............................................22
Individual IP Member Filtering Profile .................................22
Active Filtering Profiles .............................................................23
Global Filtering Profile.........................................................23
Override Account Profile .....................................................23
Time Profile.........................................................................23
Lock Profile .........................................................................23
Filtering Profile Components ...........................................................24
Library Categories . ...................................................................25

CONTENTS
iv M86 SECURITY USER GUIDE
M86 Supplied Categories....................................................25
Custom Categories .............................................................25
Service Ports . ...........................................................................26
Rules ........................................................................................26
Minimum Filtering Level ............................................................26
Filter Settings ............................................................................27
Filtering Rules .................................................................................28
Filtering Levels Applied ............................................................28
Chapter 2: Logging and Blocking ............................................31
Web Access Logging ......................................................................31
Instant Messaging, Peer-to-Peer Blocking ......................................31
How IM and P2P Blocking Works .............................................31
IM Blocking..........................................................................31
P2P Blocking.......................................................................32
Setting up IM and P2P ..............................................................33
Using IM and P2P .....................................................................33
Block IM, P2P for All Users ................................................34
Block IM for All Users ...................................................34
Block P2P for All Users.................................................34
Block Specified Entities from Using IM, P2P.......................34
Block IM for a Specific Entity........................................34
Block P2P for a Specific Entity .....................................35
Chapter 3: Synchronizing Multiple Units ................................36
Web Filter Synchronization .............................................................36
Synchronization Setup ....................................................................38
Setting up a Source Server ......................................................38
Setting up a Target Server .......................................................38
Types of Synchronization Processes ..............................................39
Filtering Profile Synchronization Process .................................39
Library Synchronization Process ..............................................40
Delays in Synchronization ...............................................................41
Synchronized, Non-Synchronized Items .........................................42
Synchronize All Items ...............................................................43
Synchronized Items (All) .....................................................43
Functionally Synchronized Items ........................................43
Non-synchronized Items .....................................................44
Synchronize Only Library Items ................................................45
Synchronized Items (Library Only)......................................45
Functionally Synchronized Items ........................................45

CONTENTS
M86 SECURITY USER GUIDE v
Non-synchronized Items .....................................................45
Server Maintenance Procedures .....................................................47
Source Server Failure Scenarios ..............................................47
Establish Backup Procedures ...................................................47
Use a Backup File to Set up a Source Server ..........................48
Set up a Target Server as a Source Server........................48
Set up a Replacement Target Server .................................49
Set up a New Source Server from Scratch ...............................49
Set up a Target Server as a Source Server........................49
Chapter 4: Getting Started .......................................................50
Initial Setup .....................................................................................50
Access the Administrator Console ..................................................50
Log On ......................................................................................50
Last Library Update message .............................................52
Navigation Tips .........................................................................54
Access Main Sections.........................................................54
Help Features .....................................................................56
Access Help Topics......................................................56
Tooltips.........................................................................57
Screen and Window Navigation .........................................59
Topic Links....................................................................59
Select Sub-topics..........................................................60
Navigate a Tree List......................................................61
Tree List Topics and Sub-topics...................................62
Navigate a Window with Tabs ......................................63
Console Tips and Shortcuts ...............................................64
Navigation Path ............................................................64
Refresh the Console.....................................................64
Select Multiple Items.....................................................65
Copy and Paste Text....................................................65
Calculate IP Ranges without Overlaps.........................66
Re-size the User Interface............................................67
Log Off ......................................................................................68
Technical Support / Product Warranties .........................................68
G LOBAL A DMINISTRATOR S ECTION .................................. 69
Introduction ...............................................................................69
Chapter 1: System screen ........................................................70

CONTENTS
vi M86 SECURITY USER GUIDE
Control .............................................................................................72
Filter window .............................................................................72
Local Filtering......................................................................73
Disable Local Filtering Options.....................................73
Enable Local Filtering Options......................................74
HTTP Filtering.....................................................................74
Enable HTTP Packet Splitting Detection......................74
Disable HTTP Packet Splitting Detection .....................74
HTTPS Filtering ..................................................................75
Service Control....................................................................76
Enable Pattern Blocking ...............................................76
Disable Pattern Blocking...............................................77
Target(s) Filtering................................................................77
Disable Filtering on Target Servers..............................77
Enable Filtering on Target Servers...............................77
Block Page Authentication window ...........................................78
Enter, Edit Block Page Options ..........................................79
Block page ..........................................................................80
Options page.......................................................................82
Option 2........................................................................83
Option 3........................................................................84
ShutDown window ....................................................................85
Shut Down the Server.........................................................85
Reboot window .........................................................................86
Reboot the Server...............................................................86
Network ...........................................................................................88
LAN Settings window ................................................................88
Specify LAN Settings .........................................................89
NTP Servers window ................................................................90
Specify Network Time Protocol Servers .............................91
Add an NTP Server.......................................................91
Remove an NTP Server................................................91
Regional Setting window . .........................................................92
Specify the Time Zone, Language Set................................92
Block Page Route Table window ..............................................93
Add a Router ......................................................................94
Remove a Router................................................................94
Administrator ...................................................................................95
Administrator window ...............................................................95
View Administrator Accounts ..............................................96
Add an Administrator Account.............................................96

CONTENTS
M86 SECURITY USER GUIDE vii
Edit an Administrator Account ............................................97
Delete an Administrator Account.........................................97
Secure Logon ..................................................................................98
Logon Settings window .............................................................98
Enable, Disable Password Expiration.................................99
Enable, Disable Account Lockout ....................................100
Logon Management ................................................................102
View User Account Status, Unlock Username .................103
View Account Status...................................................103
Unlock a Username....................................................104
View Locked IP Address, Unlock IP Address....................104
View Locked IPs.........................................................104
Unlock an IP Address.................................................104
View Admin, Sub Admin User Interface Access ..............105
Diagnostics ....................................................................................106
System Command window .....................................................106
Perform a Diagnostic Test, View Data .............................107
Command Selections........................................................108
Ping.............................................................................108
Trace Route................................................................108
Process list .................................................................108
TOP CPU processes ..................................................109
NIC configuration........................................................109
Active connections......................................................109
Routing table...............................................................109
Current memory usage...............................................110
CPU usage .................................................................110
System performance...................................................110
Recent logins..............................................................110
System uptime............................................................111
df(disk usage).............................................................111
dmesg(print kernel ring buffer)....................................111
View Log File window .............................................................112
View Log Results ..............................................................112
Troubleshooting Mode window ...............................................114
Use the Troubleshooting Mode ........................................115
Active Profile Lookup window .................................................116
Verify Whether a Profile is Active .....................................117
Admin Audit Trail window .......................................................120
Admin Audit Trail...............................................................120
Specify FTP Criteria....................................................121

CONTENTS
viii M86 SECURITY USER GUIDE
FTP the Log on Demand ............................................121
View .................................................................................122
View the Log of Administrator Changes .....................122
Alert ...............................................................................................123
Alert Settings window .............................................................123
Enable the Alert Feature ..................................................125
Modify Alert Settings.........................................................125
Disable the Alert Feature ..................................................125
SMTP Server Settings window ...............................................126
Enter, Edit SMTP Server Settings.....................................126
Verify SMTP Settings........................................................127
Software Update ...........................................................................128
Local Software Update window ..............................................128
Read Information about a Software Update......................129
Select and Apply a Software Update ...............................130
General Software Installation Procedures..................130
Enable/Disable Software Update Type Downloads....132
First Time LA/Beta Software Install Procedures.........133
Undo an Applied Software Update....................................134
Software Update Log window .................................................135
View Log Contents............................................................135
Download Log, View, Print Contents ................................136
Download the Log.......................................................136
View the Contents of the Log......................................137
Save, Print the Log File Contents...............................139
Synchronization .............................................................................140
Setup window . ........................................................................141
Using Only One Web Filter on the Network......................141
Using More than One Web Filter on the Network .............142
Set up a Web Filter to be a Source Server.................142
Sync All Target Servers with the Same Settings........145
Set up a Web Filter to be a Target Server..................145
Status window ........................................................................147
View the Sync Status of Targets from the Source ...........148
View Items in the Queue.............................................148
View Items Previously Synced to the Server..............149
Place Items in Queue for Syncing.....................................150
View the Sync Status of the Target Server .......................150
Mode .............................................................................................152
Operation Mode window .........................................................152
Set the Operation Mode ...................................................153

CONTENTS
M86 SECURITY USER GUIDE ix
Specify the Listening Device.............................................153
Specify the Block Page Device.........................................153
Invisible Option: Specify the Block Page Delivery.............154
ICAP Option: Specify ICAP Server Settings .....................155
Apply Operation Mode Settings ........................................156
Proxy Environment Settings window . .....................................157
Use a Local Proxy Server .................................................157
Use Proxy Port 80.............................................................158
Enable HTTPS Filtering ....................................................158
Authentication ...............................................................................158
Backup/Restore .............................................................................159
Backup/Restore window .........................................................159
Backup Procedures...........................................................160
Perform a Backup on Demand .........................................161
Schedule a Backup ..........................................................162
Configure FTP Server Settings...................................162
Create a Backup Schedule.........................................163
Remove a Backup Schedule ......................................166
Download a File ...............................................................167
Perform a Restoration ......................................................168
Upload a File to the Server.........................................168
Restore Configurations to the Server .........................169
Remove a Backup File......................................................169
View Backup and Restoration Details ..............................170
Reset .............................................................................................171
Reset window .........................................................................171
Reset All Server Settings..................................................171
Radius Authentication Settings .....................................................172
Radius Authentication Settings window ..................................172
Enable Radius...................................................................173
Specify Radius Authentication Settings......................173
Apply Settings.............................................................174
Disable Radius..................................................................174
SNMP ............................................................................................175
SNMP window ........................................................................175
Enable SNMP....................................................................175
Specify Monitoring Settings ..............................................176
Set up Community Token for Public Access...............176
Create, Build the Access Control List.........................176
Maintain the Access Control List ................................176
Hardware Failure Detection ..........................................................177

CONTENTS
xM86 SECURITY USER GUIDE
Hardware Failure Detection window .......................................177
View the Status of the Hard Drives ...................................177
X Strikes Blocking .........................................................................179
X Strikes Blocking window ......................................................179
Configuration.....................................................................180
Set up Blocking Criteria..............................................180
Reset All Workstations................................................181
Lock Page...................................................................181
Overblocking or Underblocking...................................182
Email Alert.........................................................................183
Set up Email Alert Criteria ..........................................184
Set up Email Alert Recipients.....................................185
Remove Email Alert Recipients..................................185
Logon Accounts ...............................................................186
Set up Users Authorized to Unlock Workstations.......186
Deactivate an Authorized Logon Account...................187
Delete a Logon Account .............................................187
Categories.........................................................................188
Set up Categories to Receive Strikes or No Strikes...188
Go to X Strikes Unlock Workstation GUI ..........................189
Re-login window .........................................................189
X Strikes Unlock Workstation ...........................................190
Unlock a Workstation..................................................190
Set up an Email Address to Receive Alerts................192
Remove an Email Address from the Alert List............192
Close the Window.......................................................192
Warn Option Setting ......................................................................193
Warn Option Setting window ..................................................193
Specify Interval for Re-displaying the Warn page.............194
Customization ...............................................................................195
Common Customization window . ...........................................196
Enable, Disable Features .................................................197
Lock Page Customization window ..........................................199
Edit Entries, Setting ..........................................................200
Preview Sample Lock Page .............................................201
Block Page Customization window .........................................202
Add, Edit Entries ...............................................................203
Preview Sample Block Page ............................................204
Warn Page Customization window .........................................206
Add, Edit Entries ..............................................................207
Preview Sample Warning Page .......................................208