Trustwave M86 Bedienungsanleitung

M86 Web Filtering and Reporting Suite

USER GUIDE

Software Version: 3.0.00

Document Version: 02.28.11

II M86 SECURITY USER GUIDE

M86 SECURITY WEB FILTERING AND

REPORTING SUITE USER GUIDE

828 W. Taft Ave., Orange, CA 92865, USA

Version 1.01, published February 2011 for software release

3.0.00

Printed in the United States of America

This document may not, in whole or in part, be copied, photo-

copied, reproduced, translated, or reduced to any electronic

medium or machine readable form without prior written con-

sent from M86 Security.

Every effort has been made to ensure the accuracy of this

document. However, M86 Security makes no warranties with

respect to this documentation and disclaims any implied war-

ranties of merchantability and fitness for a particular purpose.

M86 Security shall not be liable for any error or for incidental

or consequential damages in connection with the furnishing,

performance, or use of this manual or the examples herein.

Due to future enhancements and modifications of this product,

the information described in this documentation is subject to

change without notice.

The latest version of this document can be obtained from

http://www.m86security.com/support/wfr/documentation.asp

Trademarks

Other product names mentioned in this manual may be trade-

marks or registered trademarks of their respective companies

and are the sole property of their respective manufacturers.

Part# WFR-UG_v1.01-1102

M86 SECURITY USER GUIDE iii

CONTENTS

WFR S

UITE

VERVIEW

..................................................... 1

How to Use this User Guide ....................................................... 2

Organization ...................................................................................... 2

Conventions ...................................................................................... 3

Components and Environment ..................................................4

Components ...................................................................................... 4

Hardware .................................................................................... 4

Software ..................................................................................... 4

Environment ...................................................................................... 5

Network Requirements ............................................................... 5

Administrator Workstation Requirements ................................... 5

End User Workstation Requirements ......................................... 6

How to Use the WFR on the Web ...............................................7

Initial Setup ....................................................................................... 7

Access the WFR Welcome Window .................................................. 7

Single Sign-On Access ..................................................................... 9

Access all applications from the SR UI ....................................... 9

Default Usernames and Passwords . ........................................ 10

Technical Support / Product Warranties ......................................... 10

ILTER

NTRODUCTORY

ECTION

............................. 11

Web Filter ................................................................................... 11

About this Portion of the User Guide ...................................... 11

Terminology .................................................................................... 13

Overview .................................................................................... 18

Chapter 1: Filtering Operations ............................................... 19

Operational Modes .......................................................................... 19

Invisible Mode ........................................................................... 20

Router Mode ............................................................................. 22

Firewall Mode ........................................................................... 23

Group Types ................................................................................... 25

CONTENTS

iv M86 SECURITY USER GUIDE

Global Group ............................................................................ 25

IP Groups . ................................................................................ 26

Filtering Profile Types ..................................................................... 27

Static Filtering Profiles . ............................................................. 29

Master IP Group Filtering Profile......................................... 29

IP Sub-Group Filtering Profile ............................................. 29

Individual IP Member Filtering Profile ................................. 29

Active Filtering Profiles . ............................................................ 30

Global Filtering Profile......................................................... 30

Override Account Profile ..................................................... 30

Time Profile ......................................................................... 30

Lock Profile ......................................................................... 30

Filtering Profile Components ........................................................... 31

Library Categories . ................................................................... 32

M86 Supplied Categories.................................................... 32

Custom Categories ............................................................. 32

Service Ports . ........................................................................... 33

Rules ........................................................................................ 33

Minimum Filtering Level ............................................................ 33

Filter Settings ............................................................................ 34

Filtering Rules ................................................................................. 35

Filtering Levels Applied ............................................................ 35

Chapter 2: Logging and Blocking ............................................ 38

Web Access Logging ...................................................................... 38

Instant Messaging, Peer-to-Peer Blocking ...................................... 38

How IM and P2P Blocking Works ............................................. 38

IM Blocking.......................................................................... 38

P2P Blocking....................................................................... 39

Setting up IM and P2P .............................................................. 40

Using IM and P2P ..................................................................... 40

Block IM, P2P for All Users ................................................ 41

Block IM for All Users ................................................... 41

Block P2P for All Users................................................. 41

Block Specified Entities from Using IM, P2P ...................... 42

Block IM for a Specific Entity ........................................ 42

Block P2P for a Specific Entity ..................................... 42

Chapter 3: Synchronizing Multiple Units ................................ 43

Web Filter Synchronization ............................................................. 43

Synchronization Setup .................................................................... 45

CONTENTS

M86 SECURITY USER GUIDE v

Setting up a Source Server ...................................................... 45

Setting up a Target Server ....................................................... 45

Types of Synchronization Processes .............................................. 46

Filtering Profile Synchronization Process ................................. 46

Library Synchronization Process .............................................. 47

Delays in Synchronization ............................................................... 48

Synchronized, Non-Synchronized Items ......................................... 49

Synchronize All Items . .............................................................. 50

Synchronized Items (All) ..................................................... 50

Functionally Synchronized Items ........................................ 50

Non-synchronized Items ..................................................... 51

Synchronize Only Library Items ................................................ 52

Synchronized Items (Library Only) ...................................... 52

Functionally Synchronized Items ........................................ 52

Non-synchronized Items ..................................................... 52

Server Maintenance Procedures ..................................................... 54

Source Server Failure Scenarios .............................................. 54

Establish Backup Procedures ................................................... 54

Use a Backup File to Set up a Source Server .......................... 55

Set up a Target Server as a Source Server ........................ 55

Set up a Replacement Target Server ................................. 56

Set up a New Source Server from Scratch ............................... 56

Set up a Target Server as a Source Server ........................ 56

Chapter 4: Getting Started ....................................................... 57

Using the Administrator Console ..................................................... 57

Access the Web Filter Login window ........................................ 57

Access the Web Filter from the WFR Portal ....................... 57

Enter Web Filter’s URL in the Address field ....................... 58

Last Library Update message ............................................. 60

Navigation Tips . ........................................................................ 62

Access Main Sections ......................................................... 62

Help Features ..................................................................... 64

Access Help Topics ...................................................... 64

Tooltips ......................................................................... 65

Screen and Window Navigation ......................................... 67

Topic Links.................................................................... 67

Select Sub-topics.......................................................... 68

Navigate a Tree List...................................................... 69

Tree List Topics and Sub-topics ................................... 70

CONTENTS

vi M86 SECURITY USER GUIDE

Navigate a Window with Tabs ...................................... 71

Console Tips and Shortcuts ............................................... 72

Navigation Path ............................................................ 72

Refresh the Console ..................................................... 72

Select Multiple Items..................................................... 73

Copy and Paste Text .................................................... 73

Calculate IP Ranges without Overlaps ......................... 74

Re-size the User Interface ............................................ 75

Log Out . .................................................................................... 76

WF G

LOBAL

DMINISTRATOR

ECTION

........................... 77

Introduction ............................................................................... 77

Chapter 1: System screen ........................................................ 78

Control ............................................................................................. 80

Filter window ............................................................................. 80

Local Filtering...................................................................... 81

Disable Local Filtering Options ..................................... 81

Enable Local Filtering Options...................................... 82

HTTP Filtering ..................................................................... 82

Enable HTTP Packet Splitting Detection ...................... 82

Disable HTTP Packet Splitting Detection ..................... 82

HTTPS Filtering .................................................................. 83

Service Control.................................................................... 84

Enable Pattern Blocking ............................................... 84

Disable Pattern Blocking............................................... 85

Target(s) Filtering................................................................ 85

Disable Filtering on Target Servers .............................. 85

Enable Filtering on Target Servers ............................... 85

Block Page Authentication window ........................................... 86

Enter, Edit Block Page Options .......................................... 87

Block page .......................................................................... 88

Options page....................................................................... 90

Option 2 ........................................................................ 91

Option 3 ........................................................................ 92

ShutDown window . ................................................................... 93

Shut Down the Server ......................................................... 93

Reboot window . ........................................................................ 94

Reboot the Server ............................................................... 94

Network ........................................................................................... 96

CONTENTS

M86 SECURITY USER GUIDE vii

LAN Settings window ................................................................ 96

Specify LAN Settings ......................................................... 97

NTP Servers window . ............................................................... 98

Specify Network Time Protocol Servers ............................. 99

Add an NTP Server....................................................... 99

Remove an NTP Server................................................ 99

Regional Setting window . ....................................................... 100

Specify the Time Zone, Language Set.............................. 100

Block Page Route Table window ............................................ 101

Add a Router .................................................................... 102

Remove a Router .............................................................. 102

Administrator ................................................................................. 103

Administrator window ............................................................. 103

View Administrator Accounts ............................................ 104

Add an Administrator Account........................................... 104

Edit an Administrator Account .......................................... 105

Delete an Administrator Account....................................... 105

Secure Logon ................................................................................ 106

Logon Settings window ........................................................... 106

Enable, Disable Password Expiration ............................... 107

Enable, Disable Account Lockout .................................... 108

Logon Management ................................................................ 110

View User Account Status, Unlock Username ................. 111

View Account Status................................................... 111

Unlock a Username .................................................... 112

View Locked IP Address, Unlock IP Address.................... 112

View Locked IPs ......................................................... 112

Unlock an IP Address ................................................. 112

View Admin, Sub Admin User Interface Access .............. 113

Diagnostics .................................................................................... 114

System Command window ..................................................... 114

Perform a Diagnostic Test, View Data ............................. 115

Command Selections ........................................................ 116

Ping............................................................................. 116

Trace Route ................................................................ 116

Process list ................................................................. 116

TOP CPU processes .................................................. 117

NIC configuration ........................................................ 117

Active connections...................................................... 117

Routing table............................................................... 117

Current memory usage ............................................... 118

CONTENTS

viii M86 SECURITY USER GUIDE

CPU usage ................................................................. 118

System performance................................................... 118

Recent logins .............................................................. 118

System uptime ............................................................ 119

df(disk usage) ............................................................. 119

dmesg(print kernel ring buffer).................................... 119

View Log File window . ............................................................ 120

View Log Results .............................................................. 120

Troubleshooting Mode window ............................................... 122

Use the Troubleshooting Mode ........................................ 123

Active Profile Lookup window ................................................. 124

Verify Whether a Profile is Active ..................................... 125

Admin Audit Trail window ....................................................... 128

Admin Audit Trail............................................................... 128

Specify FTP Criteria....................................................129

FTP the Log on Demand ............................................ 129

View ................................................................................. 130

View the Log of Administrator Changes ..................... 130

Alert ............................................................................................... 131

Alert Settings window ............................................................. 131

Enable the Alert Feature .................................................. 133

Modify Alert Settings ......................................................... 133

Disable the Alert Feature .................................................. 133

SMTP Server Settings window . .............................................. 134

Enter, Edit SMTP Server Settings ..................................... 134

Verify SMTP Settings ........................................................ 135

Software Update ........................................................................... 136

Local Software Update window .............................................. 136

Read Information about a Software Update...................... 137

Select and Apply a Software Update ................................ 137

Undo an Applied Software Update ................................... 140

Software Update Log window ................................................. 140

View Log Contents ............................................................ 141

Download Log, View, Print Contents................................. 141

Download the Log....................................................... 141

View the Contents of the Log...................................... 142

Save, Print the Log File Contents ............................... 144

Synchronization ............................................................................. 145

Setup window . ........................................................................ 146

Using Only One Web Filter on the Network ..................... 147

Using More than One Web Filter on the Network ............. 147

CONTENTS

M86 SECURITY USER GUIDE ix

Set up a Web Filter to be a Source Server................. 147

Sync All Target Servers with the Same Settings ........ 150

Set up a Web Filter to be a Target Server.................. 151

Status window . ....................................................................... 153

View the Sync Status of Targets from the Source ........... 154

View Items in the Queue............................................. 154

View Items Previously Synced to the Server .............. 155

Place Items in Queue for Syncing..................................... 156

View the Sync Status of the Target Server ....................... 156

Mode ............................................................................................. 158

Operation Mode window ......................................................... 158

Set the Operation Mode ................................................... 159

Specify the Listening Device ............................................. 159

Specify the Block Page Device ......................................... 159

Invisible Option: Specify the Block Page Delivery............. 160

ICAP Option: Specify ICAP Server Settings ..................... 161

Mobile Option: Specify the Mobile Client Control ............. 163

Apply Operation Mode Settings ........................................ 163

Proxy Environment Settings window . ..................................... 164

Use a Local Proxy Server ................................................. 164

Use Proxy Port 80 ............................................................. 165

Enable HTTPS Filtering .................................................... 165

Authentication ............................................................................... 165

Backup/Restore ............................................................................. 166

Backup/Restore window ......................................................... 166

Backup Procedures........................................................... 167

Perform a Backup on Demand .........................................168

Schedule a Backup .......................................................... 169

Configure FTP Server Settings................................... 169

Create a Backup Schedule......................................... 170

Remove a Backup Schedule ...................................... 173

Download a File ............................................................... 174

Perform a Restoration ...................................................... 175

Upload a File to the Server......................................... 175

Restore Configurations to the Server ......................... 176

Remove a Backup File ...................................................... 176

View Backup and Restoration Details .............................. 177

Reset ............................................................................................. 178

Reset window ......................................................................... 178

Radius Authentication Settings ..................................................... 179

Radius Authentication Settings window .................................. 179

CONTENTS

xM86 SECURITY USER GUIDE

Enable Radius................................................................... 180

Specify Radius Authentication Settings ...................... 180

Apply Settings............................................................. 181

Disable Radius .................................................................. 181

SNMP ............................................................................................ 182

SNMP window ........................................................................ 182

Enable SNMP.................................................................... 182

Specify Monitoring Settings .............................................. 183

Set up Community Token for Public Access............... 183

Create, Build the Access Control List .........................183

Maintain the Access Control List ................................ 183

Hardware Failure Detection .......................................................... 184

Hardware Failure Detection window ....................................... 184

View the Status of the Hard Drives ................................... 185

X Strikes Blocking ......................................................................... 186

X Strikes Blocking window ...................................................... 186

Configuration..................................................................... 187

Set up Blocking Criteria .............................................. 187

Reset All Workstations................................................ 188

Lock Page ............................................................................... 188

Overblocking or Underblocking................................... 189

Email Alert ........................................................................ 191

Set up Email Alert Criteria .......................................... 191

Set up Email Alert Recipients ..................................... 192

Remove Email Alert Recipients .................................. 192

Logon Accounts ............................................................... 193

Set up Users Authorized to Unlock Workstations ....... 193

Deactivate an Authorized Logon Account................... 194

Delete a Logon Account ............................................. 194

Categories......................................................................... 195

Set up Categories to Receive Strikes or No Strikes ... 195

Go to X Strikes Unlock Workstation GUI .......................... 196

Re-login window ......................................................... 196

X Strikes Unlock Workstation ........................................... 197

Unlock a Workstation.................................................. 197

Set up an Email Address to Receive Alerts ................ 199

Remove an Email Address from the Alert List ............ 199

Close the Pop-up Window .......................................... 199

Warn Option Setting ...................................................................... 200

Warn Option Setting window .................................................. 200

Specify Interval for Re-displaying the Warn page ............. 201

Andere Handbücher für M86

Inhaltsverzeichnis

Andere Trustwave Firewall Handbücher

Trustwave

Trustwave 300 Bedienungsanleitung

Beliebte Firewall Handbücher anderer Marken

Cisco

Cisco S190 Bedienungsanleitung

Fortinet

Fortinet FortiGate Voice Series Bedienungsanleitung

ADTRAN

ADTRAN NetVanta 2300 Bedienungsanleitung

SecureLogix

SecureLogix ETM System Bedienungsanleitung

NETGEAR

NETGEAR ProSafe FVX538 Bedienungsanleitung

Lanner

Lanner FW-8877 Bedienungsanleitung

Huawei

Huawei USG6000 Series Installations- und Betriebshandbuch

H3C

H3C SecPath F5000-AI-15 Bedienungsanleitung

Nexcom

Nexcom DNA 1150 Bedienungsanleitung

Fortinet

Fortinet FortiGate-60 series Bedienungsanleitung

Cisco

Cisco 3110 Handbuch

Draytek

Draytek Vigor2860 Series Bedienungsanleitung

Lanner electronics

Lanner electronics FW-7650 Series Bedienungsanleitung

Swisscom

Swisscom Internet Backup Bedienungsanleitung

SonicWALL

SonicWALL NSa 5700 Bedienungsanleitung

DPtech

DPtech FW1000 SERIES Bedienungsanleitung

FEITIAN

FEITIAN MultiPass FIDO Bedienungsanleitung

EBLOCKER

EBLOCKER PRO Bedienungsanleitung