Kerio Tech Firewall6 User Manual

Page 164

Advertising
background image

Chapter 12

HTTP and FTP filtering

164

in the ISS OrangeWeb Filter tab will not be available). For detailed information about the

licensing policy, read chapter

44

.

2.

The firewall’s traffic rules must not block access to ISS OrangeWeb Filter’s database

servers. If, for any reason, access from the firewall to the Internet is restricted, it is

necessary to allow access to the COFS service (6000/TCP).

3.

If the Internet connection is provided by a dial-up, it is not recommended to use ISS

OrangeWeb Filter.

Upon startup of the WinRoute Engine, access to the database server is checked (this

process is called activation). This activation is refreshed regularly.

If the line is hung up while the activation is being started and refreshed, the activation is

not started and the ISS OrangeWeb Filter module will not work. In addition, communica-

tion with the database server significantly increases the response time for connection to

such web pages classification of which is not saved in the local cache.

ISS OrangeWeb Filter configuration

The ISS OrangeWeb Filter module can be set and configured through the ISS OrangeWeb Filter

tab in Configuration Content Filtering HTTP Policy.

Enable ISS OrangeWeb Filter

use this option to enable/disable the ISS OrangeWeb Filter module for classification of

websites.

If ISS OrangeWeb Filter is disabled:

the other options in the ISS OrangeWeb Filter tab are not available,

all URL rules which use the ISS OrangeWeb Filter classification are disabled (for

details, refer to chapter

12.4

).

Categorize each page regardless of HTTP rules

If this option is enabled, ISS OrangeWeb Filter categorization will be applied to any web

pages (i.e. to all HTTP requests processed by the HTTP protocol inspector).

Categorization of all pages is necessary for statistics of the categories of visited web

pages (see chapter

21

). If you do not intend to keep these statistics, it is recommended

disable this option (categorization of all web pages might be demanding and it might

decrease WinRoute performance).

Servers (Web sites) not to be rated by the module can eb specified in ISS OrangeWeb Filter

white list. Use the Add button to open a dialog where a new item (server or a Web page) can be

added.

Server

Use the Server item to specify Web sites not to be classified by the ISS OrangeWeb Filter.

The following items can be specified:

Advertising