Trustwave M86 User manual

M86 Web Filtering and Reporting Suite
USER GUIDE
Software Version: 3.0.00
Document Version: 02.28.11

II M86 SECURITY USER GUIDE
M86 SECURITY WEB FILTERING AND
REPORTING SUITE USER GUIDE
© 2011 M86 Security
All rights reserved.
828 W. Taft Ave., Orange, CA 92865, USA
Version 1.01, published February 2011 for software release
3.0.00
Printed in the United States of America
This document may not, in whole or in part, be copied, photo-
copied, reproduced, translated, or reduced to any electronic
medium or machine readable form without prior written con-
sent from M86 Security.
Every effort has been made to ensure the accuracy of this
document. However, M86 Security makes no warranties with
respect to this documentation and disclaims any implied war-
ranties of merchantability and fitness for a particular purpose.
M86 Security shall not be liable for any error or for incidental
or consequential damages in connection with the furnishing,
performance, or use of this manual or the examples herein.
Due to future enhancements and modifications of this product,
the information described in this documentation is subject to
change without notice.
The latest version of this document can be obtained from
http://www.m86security.com/support/wfr/documentation.asp
Trademarks
Other product names mentioned in this manual may be trade-
marks or registered trademarks of their respective companies
and are the sole property of their respective manufacturers.
Part# WFR-UG_v1.01-1102

M86 SECURITY USER GUIDE iii
CONTENTS
WFR S UITE O VERVIEW ..................................................... 1
How to Use this User Guide ....................................................... 2
Organization ...................................................................................... 2
Conventions ...................................................................................... 3
Components and Environment ..................................................4
Components ...................................................................................... 4
Hardware .................................................................................... 4
Software ..................................................................................... 4
Environment ...................................................................................... 5
Network Requirements ............................................................... 5
Administrator Workstation Requirements ................................... 5
End User Workstation Requirements ......................................... 6
How to Use the WFR on the Web ...............................................7
Initial Setup ....................................................................................... 7
Access the WFR Welcome Window .................................................. 7
Single Sign-On Access ..................................................................... 9
Access all applications from the SR UI ....................................... 9
Default Usernames and Passwords . ........................................ 10
Technical Support / Product Warranties ......................................... 10
W EB F ILTER I NTRODUCTORY S ECTION ............................. 11
Web Filter ................................................................................... 11
About this Portion of the User Guide ...................................... 11
Terminology .................................................................................... 13
Overview .................................................................................... 18
Chapter 1: Filtering Operations ............................................... 19
Operational Modes .......................................................................... 19
Invisible Mode ........................................................................... 20
Router Mode ............................................................................. 22
Firewall Mode ........................................................................... 23
Group Types ................................................................................... 25

CONTENTS
iv M86 SECURITY USER GUIDE
Global Group ............................................................................ 25
IP Groups . ................................................................................ 26
Filtering Profile Types ..................................................................... 27
Static Filtering Profiles . ............................................................. 29
Master IP Group Filtering Profile......................................... 29
IP Sub-Group Filtering Profile ............................................. 29
Individual IP Member Filtering Profile ................................. 29
Active Filtering Profiles . ............................................................ 30
Global Filtering Profile......................................................... 30
Override Account Profile ..................................................... 30
Time Profile ......................................................................... 30
Lock Profile ......................................................................... 30
Filtering Profile Components ........................................................... 31
Library Categories . ................................................................... 32
M86 Supplied Categories.................................................... 32
Custom Categories ............................................................. 32
Service Ports . ........................................................................... 33
Rules ........................................................................................ 33
Minimum Filtering Level ............................................................ 33
Filter Settings ............................................................................ 34
Filtering Rules ................................................................................. 35
Filtering Levels Applied ............................................................ 35
Chapter 2: Logging and Blocking ............................................ 38
Web Access Logging ...................................................................... 38
Instant Messaging, Peer-to-Peer Blocking ...................................... 38
How IM and P2P Blocking Works ............................................. 38
IM Blocking.......................................................................... 38
P2P Blocking....................................................................... 39
Setting up IM and P2P .............................................................. 40
Using IM and P2P ..................................................................... 40
Block IM, P2P for All Users ................................................ 41
Block IM for All Users ................................................... 41
Block P2P for All Users................................................. 41
Block Specified Entities from Using IM, P2P ...................... 42
Block IM for a Specific Entity ........................................ 42
Block P2P for a Specific Entity ..................................... 42
Chapter 3: Synchronizing Multiple Units ................................ 43
Web Filter Synchronization ............................................................. 43
Synchronization Setup .................................................................... 45

CONTENTS
M86 SECURITY USER GUIDE v
Setting up a Source Server ...................................................... 45
Setting up a Target Server ....................................................... 45
Types of Synchronization Processes .............................................. 46
Filtering Profile Synchronization Process ................................. 46
Library Synchronization Process .............................................. 47
Delays in Synchronization ............................................................... 48
Synchronized, Non-Synchronized Items ......................................... 49
Synchronize All Items . .............................................................. 50
Synchronized Items (All) ..................................................... 50
Functionally Synchronized Items ........................................ 50
Non-synchronized Items ..................................................... 51
Synchronize Only Library Items ................................................ 52
Synchronized Items (Library Only) ...................................... 52
Functionally Synchronized Items ........................................ 52
Non-synchronized Items ..................................................... 52
Server Maintenance Procedures ..................................................... 54
Source Server Failure Scenarios .............................................. 54
Establish Backup Procedures ................................................... 54
Use a Backup File to Set up a Source Server .......................... 55
Set up a Target Server as a Source Server ........................ 55
Set up a Replacement Target Server ................................. 56
Set up a New Source Server from Scratch ............................... 56
Set up a Target Server as a Source Server ........................ 56
Chapter 4: Getting Started ....................................................... 57
Using the Administrator Console ..................................................... 57
Access the Web Filter Login window ........................................ 57
Access the Web Filter from the WFR Portal ....................... 57
Enter Web Filter’s URL in the Address field ....................... 58
Log In ........................................................................................ 59
Last Library Update message ............................................. 60
Navigation Tips . ........................................................................ 62
Access Main Sections ......................................................... 62
Help Features ..................................................................... 64
Access Help Topics ...................................................... 64
Tooltips ......................................................................... 65
Screen and Window Navigation ......................................... 67
Topic Links.................................................................... 67
Select Sub-topics.......................................................... 68
Navigate a Tree List...................................................... 69
Tree List Topics and Sub-topics ................................... 70

CONTENTS
vi M86 SECURITY USER GUIDE
Navigate a Window with Tabs ...................................... 71
Console Tips and Shortcuts ............................................... 72
Navigation Path ............................................................ 72
Refresh the Console ..................................................... 72
Select Multiple Items..................................................... 73
Copy and Paste Text .................................................... 73
Calculate IP Ranges without Overlaps ......................... 74
Re-size the User Interface ............................................ 75
Log Out . .................................................................................... 76
WF G LOBAL A DMINISTRATOR S ECTION ........................... 77
Introduction ............................................................................... 77
Chapter 1: System screen ........................................................ 78
Control ............................................................................................. 80
Filter window ............................................................................. 80
Local Filtering...................................................................... 81
Disable Local Filtering Options ..................................... 81
Enable Local Filtering Options...................................... 82
HTTP Filtering ..................................................................... 82
Enable HTTP Packet Splitting Detection ...................... 82
Disable HTTP Packet Splitting Detection ..................... 82
HTTPS Filtering .................................................................. 83
Service Control.................................................................... 84
Enable Pattern Blocking ............................................... 84
Disable Pattern Blocking............................................... 85
Target(s) Filtering................................................................ 85
Disable Filtering on Target Servers .............................. 85
Enable Filtering on Target Servers ............................... 85
Block Page Authentication window ........................................... 86
Enter, Edit Block Page Options .......................................... 87
Block page .......................................................................... 88
Options page....................................................................... 90
Option 2 ........................................................................ 91
Option 3 ........................................................................ 92
ShutDown window . ................................................................... 93
Shut Down the Server ......................................................... 93
Reboot window . ........................................................................ 94
Reboot the Server ............................................................... 94
Network ........................................................................................... 96

CONTENTS
M86 SECURITY USER GUIDE vii
LAN Settings window ................................................................ 96
Specify LAN Settings ......................................................... 97
NTP Servers window . ............................................................... 98
Specify Network Time Protocol Servers ............................. 99
Add an NTP Server....................................................... 99
Remove an NTP Server................................................ 99
Regional Setting window . ....................................................... 100
Specify the Time Zone, Language Set.............................. 100
Block Page Route Table window ............................................ 101
Add a Router .................................................................... 102
Remove a Router .............................................................. 102
Administrator ................................................................................. 103
Administrator window ............................................................. 103
View Administrator Accounts ............................................ 104
Add an Administrator Account........................................... 104
Edit an Administrator Account .......................................... 105
Delete an Administrator Account....................................... 105
Secure Logon ................................................................................ 106
Logon Settings window ........................................................... 106
Enable, Disable Password Expiration ............................... 107
Enable, Disable Account Lockout .................................... 108
Logon Management ................................................................ 110
View User Account Status, Unlock Username ................. 111
View Account Status................................................... 111
Unlock a Username .................................................... 112
View Locked IP Address, Unlock IP Address.................... 112
View Locked IPs ......................................................... 112
Unlock an IP Address ................................................. 112
View Admin, Sub Admin User Interface Access .............. 113
Diagnostics .................................................................................... 114
System Command window ..................................................... 114
Perform a Diagnostic Test, View Data ............................. 115
Command Selections ........................................................ 116
Ping............................................................................. 116
Trace Route ................................................................ 116
Process list ................................................................. 116
TOP CPU processes .................................................. 117
NIC configuration ........................................................ 117
Active connections...................................................... 117
Routing table............................................................... 117
Current memory usage ............................................... 118

CONTENTS
viii M86 SECURITY USER GUIDE
CPU usage ................................................................. 118
System performance................................................... 118
Recent logins .............................................................. 118
System uptime ............................................................ 119
df(disk usage) ............................................................. 119
dmesg(print kernel ring buffer).................................... 119
View Log File window . ............................................................ 120
View Log Results .............................................................. 120
Troubleshooting Mode window ............................................... 122
Use the Troubleshooting Mode ........................................ 123
Active Profile Lookup window ................................................. 124
Verify Whether a Profile is Active ..................................... 125
Admin Audit Trail window ....................................................... 128
Admin Audit Trail............................................................... 128
Specify FTP Criteria....................................................129
FTP the Log on Demand ............................................ 129
View ................................................................................. 130
View the Log of Administrator Changes ..................... 130
Alert ............................................................................................... 131
Alert Settings window ............................................................. 131
Enable the Alert Feature .................................................. 133
Modify Alert Settings ......................................................... 133
Disable the Alert Feature .................................................. 133
SMTP Server Settings window . .............................................. 134
Enter, Edit SMTP Server Settings ..................................... 134
Verify SMTP Settings ........................................................ 135
Software Update ........................................................................... 136
Local Software Update window .............................................. 136
Read Information about a Software Update...................... 137
Select and Apply a Software Update ................................ 137
Undo an Applied Software Update ................................... 140
Software Update Log window ................................................. 140
View Log Contents ............................................................ 141
Download Log, View, Print Contents................................. 141
Download the Log....................................................... 141
View the Contents of the Log...................................... 142
Save, Print the Log File Contents ............................... 144
Synchronization ............................................................................. 145
Setup window . ........................................................................ 146
Using Only One Web Filter on the Network ..................... 147
Using More than One Web Filter on the Network ............. 147

CONTENTS
M86 SECURITY USER GUIDE ix
Set up a Web Filter to be a Source Server................. 147
Sync All Target Servers with the Same Settings ........ 150
Set up a Web Filter to be a Target Server.................. 151
Status window . ....................................................................... 153
View the Sync Status of Targets from the Source ........... 154
View Items in the Queue............................................. 154
View Items Previously Synced to the Server .............. 155
Place Items in Queue for Syncing..................................... 156
View the Sync Status of the Target Server ....................... 156
Mode ............................................................................................. 158
Operation Mode window ......................................................... 158
Set the Operation Mode ................................................... 159
Specify the Listening Device ............................................. 159
Specify the Block Page Device ......................................... 159
Invisible Option: Specify the Block Page Delivery............. 160
ICAP Option: Specify ICAP Server Settings ..................... 161
Mobile Option: Specify the Mobile Client Control ............. 163
Apply Operation Mode Settings ........................................ 163
Proxy Environment Settings window . ..................................... 164
Use a Local Proxy Server ................................................. 164
Use Proxy Port 80 ............................................................. 165
Enable HTTPS Filtering .................................................... 165
Authentication ............................................................................... 165
Backup/Restore ............................................................................. 166
Backup/Restore window ......................................................... 166
Backup Procedures........................................................... 167
Perform a Backup on Demand .........................................168
Schedule a Backup .......................................................... 169
Configure FTP Server Settings................................... 169
Create a Backup Schedule......................................... 170
Remove a Backup Schedule ...................................... 173
Download a File ............................................................... 174
Perform a Restoration ...................................................... 175
Upload a File to the Server......................................... 175
Restore Configurations to the Server ......................... 176
Remove a Backup File ...................................................... 176
View Backup and Restoration Details .............................. 177
Reset ............................................................................................. 178
Reset window ......................................................................... 178
Radius Authentication Settings ..................................................... 179
Radius Authentication Settings window .................................. 179

CONTENTS
xM86 SECURITY USER GUIDE
Enable Radius................................................................... 180
Specify Radius Authentication Settings ...................... 180
Apply Settings............................................................. 181
Disable Radius .................................................................. 181
SNMP ............................................................................................ 182
SNMP window ........................................................................ 182
Enable SNMP.................................................................... 182
Specify Monitoring Settings .............................................. 183
Set up Community Token for Public Access............... 183
Create, Build the Access Control List .........................183
Maintain the Access Control List ................................ 183
Hardware Failure Detection .......................................................... 184
Hardware Failure Detection window ....................................... 184
View the Status of the Hard Drives ................................... 185
X Strikes Blocking ......................................................................... 186
X Strikes Blocking window ...................................................... 186
Configuration..................................................................... 187
Set up Blocking Criteria .............................................. 187
Reset All Workstations................................................ 188
Lock Page ............................................................................... 188
Overblocking or Underblocking................................... 189
Email Alert ........................................................................ 191
Set up Email Alert Criteria .......................................... 191
Set up Email Alert Recipients ..................................... 192
Remove Email Alert Recipients .................................. 192
Logon Accounts ............................................................... 193
Set up Users Authorized to Unlock Workstations ....... 193
Deactivate an Authorized Logon Account................... 194
Delete a Logon Account ............................................. 194
Categories......................................................................... 195
Set up Categories to Receive Strikes or No Strikes ... 195
Go to X Strikes Unlock Workstation GUI .......................... 196
Re-login window ......................................................... 196
X Strikes Unlock Workstation ........................................... 197
Unlock a Workstation.................................................. 197
Set up an Email Address to Receive Alerts ................ 199
Remove an Email Address from the Alert List ............ 199
Close the Pop-up Window .......................................... 199
Warn Option Setting ...................................................................... 200
Warn Option Setting window .................................................. 200
Specify Interval for Re-displaying the Warn page ............. 201