Kerio Tech Firewall6 - Manual (Page 162)

Chapter 12 HTTP and FTP filtering
162
Figure 12.5 HTTP protocol inspector settings
12.3 Global rules for Web elements
In WinRoute you can also block certain features contained in HTML pages. Typical undesirable
items are ActiveX objects (they might enable starting of applications on client hosts) and pop-
up windows (automatically opened browser windows, usually used for advert purposes).
To define content global filtering rules go to the Content Rules tab in the Configuration →
Content Filtering → HTTP Policy section. Special settings for individual pages can be defined
in URL Rules section (refer to chapter
12.2 ).
Settings on the WWW content scanning options tab are applied to traffic of hosts where users
are not authenticated. Special settings are used for users connected through the firewall.
Each authenticated user can customize filtering rules at the user preferences page (see chap-
ter 11.4 ). However, users that are not allowed to override WWW content rules (refer to chap-
ter 15.1 ) cannot permit HTML features that are denied globally.
Allow HTML ActiveX objects
Active objects at web pages.
This option allows/blocks <object> and <embed> HTML tags.
Allow <Script> HTML tags
HTML <script> tags — commands of scripting languages, such as JavaScript, VBScript,
etc.
Allow HTML JavaScript pop-up windows
Automatic opening of new browser windows — usually pop-up windows with advertise-
ments.
This option enables/blocks the window.open() method in scripts