WatchGuard Firebox System 4.6 User Guide

Configuring the WebBlocker serviceLogging and WebBlockerWebBlocker logs attempts to access sites blocked by WebBlocker. The log that isgenerated displays information about source and destination address as well as theblocked URL and the category that caused the denial.WebBlocker also generates a log entry showing the results of any attempted databaseretrieval, including whether or not it was successful and, if not successful, why.Prerequisites to using WebBlockerYou need to complete several tasks before you can configure the Firebox to useWebBlocker:• Configure the WatchGuard service iconBecause WebBlocker relies on copying updated versions of the WebBlockerdatabase to the Event Processor, you must configure the WatchGuard servicesetting Allow Outgoing to Any. It is possible to narrow this setting and use the IPaddress of webblocker.watchguard.com. However, this address may changewithout notice.• Add some form of HTTP service iconTo use WebBlocker, add the Proxied-HTTP, Proxy, or HTTP service. WatchGuardrecommends using Proxied-HTTP, which provides filtering on all ports. (HTTPwithout the Proxy service blocks only on port 80.) WebBlocker takes precedenceover other settings in the HTTP or Proxy services. If the HTTP service allowsoutgoing from Any to Any but WebBlocker settings are set to “Block All URLs,” allWeb access is blocked. For information on adding an HTTP proxy service, see“Configuring an HTTP proxy service” on page 55.Configuring the WebBlocker serviceWebBlocker is a built-in feature of the service icons including HTTP, Proxied HTTP,and Proxy. When WebBlocker is installed, five tabs appear in the HTTP service icondialog box:• WebBlocker Controls• WB: Schedule• WB: Operational Hours• WB: Non-Operational Hours• WB: ExceptionsActivating WebBlockerTo start using WebBlocker, you must activate the feature. WatchGuard recommendsenabling the Auto Download option at the same time. This ensures that Event60