13.07.2015 Views

WatchGuard Firebox System 4.6 User Guide

WatchGuard Firebox System 4.6 User Guide

WatchGuard Firebox System 4.6 User Guide

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Configuring the WebBlocker serviceProcessor regularly and automatically updates the WebBlocker database stored onyour <strong>Firebox</strong>. From Policy Manager:1 If you have not already done so, double-click the service icon you are using forHTTP. Click the Properties tab. Click Settings.The proxy’s dialog box appears.2 Click the WebBlocker Controls tab.The WebBlocker Controls tab appears only if you selected WebBlocker during installation. If thetabs are not visible, run the installation wizard and install the WebBlocker option. For moreinformation, see the Install <strong>Guide</strong>.3 Enable the Activate WebBlocker checkbox.4 If appropriate, enable the Auto-Download the WebBlocker Database checkbox.5 Enter the message to be displayed when an end-user attempts to open a blockedWeb site.Scheduling operational and non-operational hoursWith WebBlocker, you can differentiate between operational hours and nonoperationalhours in selecting which categories to block. From the proxy’s dialog box:1 Click the WB: Schedule tab.2 Click hour blocks to toggle from Operational to Non-Operational.Setting privilegesWebBlocker differentiates URLs based on their content. Select the types of contentaccessible during operational and non-operational hours using the Privileges tabs.The options are identical for Operational and Non-Operational. From the proxy’sdialog box:1 Click the WB: Operational Privileges tab.2 Enable the content type checkboxes for the categories you would like to block.For more information on WebBlocker Categories, see the Reference <strong>Guide</strong>.Creating WebBlocker exceptionsUse exceptions to override any WebBlocker setting. Exceptions take precedence overall other rules. These blocked URLs apply only to HTTP traffic and are not related tothe Blocked Sites list.Exceptions are listed by IP address, but can be entered as domain names, networkaddresses, or host IP addresses. You can fine-tune an exception by specifying a portnumber, path, or string that is to be blocked for a particular Web site. For moreinformation on working with exceptions, see the WebBlocker section of the NetworkSecurity Handbook.From the HTTP Proxy dialog box:1 Click the WB: Exceptions tab (you might need to use the arrow keys at the right ofthe dialog box to see this tab).<strong>User</strong> <strong>Guide</strong> 61

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!