User Manual: Mako Guardian
Contents
1. Guardian allows you to report on and control web access by user For LDAP authentication you must have an appropriately configured LDAP server installed on your network Alternatively you can create Local Users on this management website You cannot use both LDAP User and Local User Authentication at the same time To choose which method of user authentication to use E Select Anonymous None No user based authentication All users will be filtered according to the Everyone rules You may still create IP Exemptions in the Advanced section LDAP User Authentication Users are authenticated via a local LDAP server Local User Authentication Users are authenticated via the CMS A When you select either LDAP or Local User Authentication you also have the option to allow anonymous unauthenticated web access If selected computers that do not authenticate their user will have the Everyone rules applied to them If you choose not to allow anonymous unauthenticated web access users who do not authenticate will be blocked from accessing web sites Oo IP Exceptions established in the Advanced section take precedence over these rules All computers with users who wish to authenticate must be aware of the Mako s proxy settings The Mako will issue proxy information to computers on its network automatically if it is being used to issue DHCP information If your Mako is not being used for DHCP or your Operating System does not support proxy in2. Based on the experience in our ficticious business if the page contains the phrase wood it s likely to be relevant information but the phrase woodchuck indicates it s likely to be irrelevant Then we hit this page l Howmuch wood Phrase Phrase score Phrase Score Total Would a woodchuck chuck If a woodchuck could chuck wood wood 10 40 woodchuck 50 200 As much wood As a woodchuck could If a woodchuck could chuck wood As we can see by the scoring we ve chosen we don t mind pages with the word wood as we ve given it a low score but we re not keen on pages with the word woodchuck Weighted Phrase limits can be used to set upper and lower limits for relevance or range limits For example if the wood Phrase score was 10 but the Weighted Phrase Limit was 30 this page would be denied as it has a wood score total of 40 If the wood Weighted Phrase Limit was 110 the page would be allowed So long as the woodchuck Weighted Phrase Limit wasn t exceed by whatever limit we set in this case any score over 200 Custom Phrase Rules for during Show Phrase Type Weight Delete woodchuck Weighted 50 e The above rules apply to Everyone all the time Add Phrase Phrase wood Add to Preview Preview lt empty gt Reset Type O Allow O Deny Weight 10 Group Everyone Group Setup gt Time Anytime gt Time Setup gt Weighted Phrase Setup Group Everyone gt Group Setup
3. gt Weighted Phrase Mode Multi Each match of a phrase counts multiple times gt Weighted Phrase Limit 90 To use Weighting Enter the word to be weighted in the Phrase field Choose Weight and enter a score of your choosing Your scoring scale is entirely up to you Select the appropriate Group for this phrase Select the appropriate Time range for this phrase Save when finished Guardian Setup 13 WWW MAKONETWORKS COM weighting consider re evaluating your weighting from time to time You may be missing out on relevant information through a change in language that the source sites are using A Weighting may need a period of fine tuning for your particular purpose If you choose to use By default the categories you add on this page will apply to Everyone Anytime 4 5 3 Phrase building Phrase building is a function that allows you to define keywords for an exact match of a word or phrase For example if you wanted to match web pages that had the phrase star wars general a successful match must contain that exact phrase words in that order with spaces before Guardian can decide whether to allow it or not To build a basic exact match phrase Enter the phrase to be targeted in the Phrase field Select the appropriate Type Allow Deny Weight score Select the appropriate Group for this phrase Select the appropriate Time range for this phrase Save when finished 4 6 Users and Groups gt Options
4. Times Name Description Options Pre Dawn 01 00am to 06 00am Main Hours 06 00am to 05 30pm 0 Use the below form to create a new Time You can have one or more intervals for a Time Add Time Name e g Lunchtime Interval 12 00 am until 12 00 am You can add more intervals by editing the time after you have saved it gt To add Time ranges E Inthe Add Time section enter a Time range name m Select the times in which rules will be applied E Add when finished You can edit the time by clicking 4 12 Advanced gt Exceptions You might wish to have certain computers on your network exempt from the Guardian rules To make an IP Address exempt from Guardian E Enter an IP Address m Click Allow IP to be exempt and they will not have any Guardian rules applied to them when accessing the Internet OR E Click Deny IP and that machine will not be able to access websites at all Add when finished Current Exceptions DHCP Name IP Address Action Delete Not set 192 168 1 2 e Add IP IP Address 192 168 1 2 Q Action Allow IP ODeny IP re Computers with IP Exceptions will override any user based rules e Guardian Setup 18 WWW MAKONETWORKS COM 4 13 Configure gt Advanced gt Site Bypass Some websites are coded in such a way that they do not work properly when viewed through the Guardian proxy IP Address Network Comments Option 64 62 243 92 Shortcut web adddress e 64 62 243 91 Shortcut we
5. g John Doe Email Address john jjneutralcompany com e g johnd example com Password e o Password Again e Add 4 9 Users and Groups gt Groups In order to create separate filtering rules for users you will need to place your users into groups If you have chosen to have no user based authentication you can create IP based groups and group machines instead of users If you have chosen to have LDAP or Local user based authentication you may also create IP based groups which will take preference over the user based rules The screen depicted below shows group setup for Local authentication but the process is the same if you have chosen LDAP or IP from the Users and Groups gt Options section To create a group E Enter a name for the group m Add when finished Your Group will then appear in the Groups list You can continue adding as many Groups as you need To add users or IP addresses if you have created an IP Group m Click the Group s icon E Inthe resulting pop up window select the User from the drop down list under Add Group Member m Close when finished Users can belong to more than one group Once you have created groups that contain one or more users you can use them on the Sites Phrases and Advanced pages to create rules that apply to that group 4 10 Advanced gt File Types The File Types section allows you to block users from downloading certain files by their extension or MIME typ
6. larger than 10 MB Once uploaded it may take up to an hour before the changes are live File Browse The file containing all the domains and URLs to use for this category Upload Close Here you could edit your Category s name and description add or remove a single URL or add a batch of URLs in a text file To Add Remove single a URL to a category E Enter the URL in the Add Remove Sites field E Add Remove when finished To upload a batch of URLs E Click Browse in the Upload Site Category File section Navigate your way to attach the appropriate list of URLs E Upload when finished The batch text file should follow the following format E The file should be a plain text file i e something that can be opened in Notepad Not a Word document or a Rich Text file File size limit is 1OMB The file should contain one URL or Domain per line Lines that start with a hash are ignored The file can be ZIPped or GZIPped Or it can be uploaded as is The domain portion of the file can only be letters A Z numbers 0 9 full stops and hyphens Sample file http cnn com e Guardian Setup 10 WWW MAKONETWORKS COM http bbc co uk seek co nz microsoft com support apple com 4 3 1 Batch file Considerations It may take up to an hour before your uploaded file is parsed and loaded into the system m If there is an error with any URL or Domain in that file then the entire upd
7. software and should be used in conjunction with these for maximum protection 4 1 2 Enable Secure Website Protection E Check Enable Secure Website Protection While most websites use the http prefix some use the secure https prefix and can slip through normal content filtering Enabling Secure Website Protection ensures that Guardian will include https websites in its filtering protocol While the default setting for this is unchecked it s highly recommended to enable this option end users could use the https prefix to circumvent the standard http blacklist sites Configuration of local machines is required for Secure Website Protection to work If configured incorrectly no HTTPS websites will be accessible This will only check HTTPS requests on default port 443 e Guardian Setup 7 WWW MAKONETWORKS COM 4 1 3 Adding Rules based on Categories Everyone q Main Hours Show Category Description Action Delete hygiene hak about hygiene and other personal grooming related e news News sites x The above rules apply to Everyone during Main Hours hours 06 00am to 05 30pm Category gardening Gardening sites gt Group Mailroom 7 Group Setup gt Time Pre Dawn Time Setup gt Action OAllow Deny Add Use Default Site and Phrase Categories Mako Networks Spyware Protection is designed to complement existing Anti Virus and Anti Spyware software and should be used in conjunction with such
8. MAKO NETWORKS LTD product does not exist or was caused by end user or any third person s misuse neglect improper installation or testing unauthorized attempts to repair or any other cause beyond the range of intended user or by accident fire or other hazard 4 4 MAKO NETWORKS LTD shall not be liable under any warranty under this Agreement with respect to any MAKO NETWORKS LTD product that is not returned in its original shipping container or a functionally equivalent container 4 5 If MAKO NETWORKS LTD testing and examination does not disclose a defect warranted under this Agreement MAKO NETWORKS LTD shall so advise Purchaser and dispose of such MAKO NETWORKS LTD product in accordance with Purchaser s instructions on behalf of end user and at Purchaser s cost 2014Mako Networks Limited Some Rights Reserved http creativecommons org licenses by nc sa 3 0 The Mako logo is a registered trademark of Mako Networks Limited Other product and company names mentioned herein can be trademarks and or registered trademarks of their respective companies Information in this document is subject to change without notice and does not represent a commitment on the part of Mako Networks Limited This document should be read in conjunction with the Mako Networks Terms and Conditions available from the Mako Networks website http www makonetworks com Mako Networks its parent or associate companies may have patents patent applicat
9. VELORA NETWORKS For General Operation Quick Reference Guardian is Mako Networks Web Access Control WAC solution allowing your business to block access to unwanted content and allow access to business relevant information Guardian lets you filter by 1 Mako provided Blacklists Select from pre defined automatically updated site categories to block or allow 2 User created Blacklists Upload your own blacklists which you can use to block or allow 3 Custom sites Enter your own URLs 4 Phrases Select different pre defined phrase types or groups to block 5 Custom Phrases Create your own phrase categories 6 User based Rules Filter by individual users who authenticate via the Mako or your own LDAP directory server 7 Time based Rules Specify different times for different rule sets This reference is an overview Read this guide fully for details e Guardian Setup 1 WWW MAKONETWORKS COM 1 Guardian Web Access Flowchart The following diagram illustrates the flow of decision making that goes on through Guardian once IP and group filters are set up when a web page is asked to be seen by a user User attempts to access the Internet via Guardian IP EXCEPTION present for user s machine IP GROUP assigned to user s machine AUTHENTICATION TYPE LDAP ji LOCAL ANONYMOUS ACCESS permitted PROXY CONFIGURED AUTHENTICATED DD e Guardian Setup 2 Exception type IP Group Proxy Access ALLO
10. WED WWW MAKONETWORKS COM Contents 1 Guardian Web Access Flowchart 2 Introduction 2 1 Guardian Service 2 2 Guardian Management 2 3 Content Management System CMS 2 4 Manual Conventions BRB Sf SE A NJ 3 Starting Guardian 3 1 Considerations 3 2 Licencing nn Wa 4 Enabling Guardian 7 4 1 Sites gt Categories 7 4 2 Sites gt Custom Sites 9 4 3 Sites gt Custom Categories 9 4 4 Phrases gt Categories 11 4 5 Phrases gt Custom Phrases 12 4 6 Users and Groups gt Options 14 4 7 Users and Groups gt LDAP 15 4 8 Users and Groups gt Local Users 16 4 9 Users and Groups gt Groups 16 4 10 Advanced gt File Types 16 4 11 Advanced gt Times 18 4 12 Advanced gt Exceptions 18 4 13 Configure gt Advanced gt Site Bypass 19 4 14 Configure gt Advanced gt Landing Page 19 5 Finishing Up 20 5 1 Blocked site 20 e Guardian Setup 3 WWW MAKONETWORKS COM 2 Introduction 2 1 Guardian Service Guardian is an active web content filtering service that gives you comprehensive control over the web content you allow on your network With Guardian you can meet the legal requirements to control access to objectionable or inappropriate web sites Guardian runs on all our 6000 and 7000 series appliances which we call the Customer Premise Equipment CPE but in this manual any Mako appliance will be called a Mako Guardian restores employee productivity lost through non business related web browsing Guardian empowers yo
11. and a copy is available on our web site 2 4 Manual Conventions Sub tab gt Function The above shorthand assumes you ve selected a Mako to configure then navigated your way through Configure gt Services gt Guardian pages An explanatory note Usually not critical for the normal operation of the system A settings note The note requires your attention but due to the difference in browsers or configuration might not apply for the operation or configuration of the system A warning note The note requires your attention and will affect the way you and other approved users will use your system le A danger note The note requires your full attention and may significantly affect your system s integrity cause electrical damage data corruption or even a health and safety related injury e Guardian Setup 4 WWW MAKONETWORKS COM 3 Starting Guardian 3 1 Considerations Before you begin give some consideration to how you will govern access to online content You can choose to create a single set of rules that apply to every computer on your network You can also create exceptions to these rules by IP Address and separate rules for different groups of users If you decide to create rules for groups of users you can choose from the following types of user authentication m LDAP Users authenticate from a correctly configured LDAP server located on their network Local Users authenticate from a user configured list o
12. ate is aborted m Ifthe URL has a question mark then any content after and including the is ignored For example http www cnn com search query election becomes http www cnn com search 4 4 Phrases gt Categories Phrase blocking checks the actual text content of a website for undesirable phrases and wording From the Categories page you can create rules to block web content using the terms you define in the Custom Phrases page To add a category rule In the Add Phrase Category drop down menu select a category Select the group the rule is for Click Group Setup to create a new group Select when the rule will apply Click Time Setup to create a new time range Add when finished When the page is refreshed your new rule will be listed in the top section To add a Phrase Category E Select the category from the drop down menu and click the Add button E To remove click By default the categories you add on this page will apply to Everyone Anytime e Guardian Setup 11 WWW MAKONETWORKS COM 4 5 Phrases gt Custom Phrases Custom Phrases are used to block or allow access to websites based upon their actual text content Everyone gt Anytime Show Phrase Type Weight Delete NSAIDs e The above rules apply to Everyone all the time Phrase COX 2 Add to Preview Preview lt empty gt Save Reset Type O Allow Deny Weight Group Everyone z Group Setup gt Time Anytime Tim
13. b adddress x 202 162 73 0 24 Demo site e IP Network of Website 202 162 73 0 24 e g 202 162 73 0 24 Comments Demo site Add To force an IP Address to bypass the Guardian proxy E Enter the IP Network of the website in the field below preferably in CDIR notation m Add a comment to identify the exempted IP address E Add when finished A website may use more than one IP Address and more than one Network so multiple entries may be required A website may change its IP Address es over time 4 14 Configure gt Advanced gt Landing Page If you would like to present users with a specific web page the first time they connect to your network enter the URL on this page To create a landing page re direct E Enter the address of the page in the website field Enter a timeout duration If a web browser is inactive for this period on your network it will be redirected to the landing page after this duration E Save when finished e Guardian Setup 19 WWW MAKONETWORKS COM 5 Finishing Up Once you have set up Guardian to your liking go back to the Guardian gt Sites gt Categories page and ensure there is a tick in the Enable Guardian check box Your Mako will then start Guardian This process can take up to five minutes for the first time Once active Guardian will display a block message like the one below for all web pages that are blocked 5 1 Blocked site That s it You now have control over what type
14. ct the Mako on which you will install Guardian Click on Reports gt Licences In the Add Licence field enter your Guardian Licence Code Click Add The licence summary will change to indicate a valid Guardian licence e Guardian Setup 5 WWW MAKONETWORKS COM Home Selection Reports gt Usage gt Configure gt Management gt Help Docs Guardian Setup Add Licence Licence Summary Mako Service Warranty Mako Failover PCI DSS Licences awaiting Activation Licence Mako Service Mako Guardian PCI DSS an extended warranty Duration 3 years 3 years 12 months You cannot add extra Mako Service licences until the Mako comes online You can still add Mako Guardian MakoMail Mako Tier One Support A QSA Bundle Active From Expiry Info e e WWW MAKONETWORKS COM 4 Enabling Guardian 4 Sites gt Categories E Check Enable Guardian Mako Guardian ERE 4 Enable Mako Guardian Befr ka SEN ea O Enable Mako Spyware Protection Categories Enable Secure Website Protection Secure Website Protection applies to host or domain names only Custom Sites Custom Categories 4 1 1 Enable Mako Spyware Protection Guardian has an option to help protect your computers from spyware Check Enable Mako Spyware Protection A Mako s spyware protection is designed to complement existing anti virus and anti spyware
15. e e Guardian Setup 16 WWW MAKONETWORKS COM The top section only displays rules relevant to the Group and Time range specified You may wish to show your Group and Time settings before you set a rule for them IL UT talento Everyone itll Show MIME Type Action Delete audio aiff N e audio mpeg N e File Extension Action Delete exe N e dmg N e The above rules apply to Everyone all the time Add Banned File Type Common types Custom types Percrerrerprnrprce audio mpeg3 Ban MIME Type audio wav audio x aiff audio x basic Group Everyone Time Anytime Time Setup gt Add Banned File Extension Ban File Extension kdl Group Everyone Group Setup gt Time Anytime Time Setup gt Add To add a Banned File Type m Select the appropriate existing common MIME type or enter a custom type m Select the relevant Group and Time for the ban Add when finished To add a Banned File Extension E Enter the file type suffix m Select the relevant Group and Time for the ban E Add when finished By default the categories you add on this page will apply to Everyone Anytime Should you wish to integrate user and time based restrictions you will need to create some groups and time periods you wish to establish separate rules for Guardian Setup 17 WWW MAKONETWORKS COM 4 11 Advanced gt Times You may wish to have different rules that apply at different times of the day
16. e Setup gt Group Everyone Group Setup gt Weighted Phrase Mode Multi Each match of a phrase counts multiple times gt Weighted Phrase Limit 160 Save You can choose to specifically allow or deny sites that contain words or groups of words You can also allocate points to a number of words and when a site contains enough words to add up to your point limit then block or allow access to the site This is called weighting re Custom phrases and Blocking are only supported on HTTP traffic types not HTTPS 4 5 1 4 5 2 Blocking or Allowing Without Weighting In these instructions we use word1 as our phrase example To Allow Deny all sites that contain the Phrase word1 In the Add Phrase section Enter word1 in the Phrase field Choose Allow or Deny for pages that contain word1 Select the appropriate Group for this phrase Select the appropriate Time range for this phrase Save when finished All sites that contain the word word1 will be blocked for the selected Group within the selected Time range Alternatively you could type a sentence in the Phrase field and all sites containing that sentence will be blocked Blocking or Allowing With Weighting With weighting you assign a score to your phrase a score limit for a page and if the page score is exceeded by the total phrase score it s blocked Here s an example using arbitrarily assigned scores e Guardian Setup 12 WWW MAKONETWORKS COM
17. f users on the Mako system If you decide to have user based rules you cannot have both LDAP and Local authentication configured at the same time you may choose one only If you choose to have user authentication you can also allow Anonymous connections users who do not authenticate will be subject to a default set of rules of your choosing Anonymous connections may be used at the same time as LDAP and Local as a fall back A Users must be placed into groups of your choosing such as Students and Teachers or Warehouse Admin and Management Users can belong to multiple groups and the rules you setup are tied to the groups rather than individual users to make configuration easier and quicker In addition you can choose to setup IP based rules for computers that will override the user based and anonymous authentication settings These IP based rules are useful for kiosks or other shared computers 3 2 Licencing To be able to use Guardian you must first purchase a licence from your Reseller Guardian licences are available in a variety of terms Contact Mako for more information We may have already entered your licence for you Adding a Guardian licence automatically enables it on your profile so you might be able to skip this step The licence code must be entered into the CMS website against your Mako To do this Go to your security service provider s website Login using your designated username and password Sele
18. for maximum protection Secure Website Protection will only check HTTPS request on port 443 unless otherwise configured Rules allow or deny web content based on the type of web content a group you define in a timeframe you define To define Categories Groups and Times see the relevant sections in this manual The Add Category section is where you create rules for certain web content categories These site categories are regularly refreshed through automated updates provided by the CMS To create a rule In the Add Category drop down menu select a category Select the group the rule is for Select when the rule will apply Select whether this rule will Allow web traffic in this category or Deny it Add when finished When the page is refreshed your new rule will be listed in the top section A good place to start is to click on the Use Default Site and Phrase Categories button This will assign the default settings A Allow rules take precedence over Deny rules So if a user belongs to a group that allows access to hacking sites this will override the default Everyone Anytime rule Regularly updated lists of sites associated with the enabled rules are blocked by default Alternatively you can allow the blocked category This may be useful when Phrase Categories block a particular category of site that you would rather allow To delete a rule from the list m Click the delete button By default the rules yo
19. formation being issued via DHCP you must enter the proxy settings manually The proxy information will be shown at the bottom of the Users and Groups gt Options screen if you have selected LDAP or Local authentication as shown below One line will be shown for each of the LAN ports on your Mako e Guardian Setup 14 WWW MAKONETWORKS COM 4 7 E If any of the browsers on your network do not support pac files you must set up proxy bypass for the local network Otherwise the web pages informing the user a page has been blocked will not work i e localhost 127 0 0 1 192 168 1 0 24 192 168 2 0 24 for all the local LANs Manual proxy configuration HTTP Proxy 192 168 1 254 Port 3128 B Use this proxy server for all protocols SSL Proxy Port 0 B FTP Proxy Port ol SOCKS Host Port 0 B O SOCKS v4 SOCKS v5 No Proxy for 127 0 0 1 192 168 1 0 24 villa org net nz 192 168 1 0 24 Users and Groups gt LDAP The LDAP page provides the fields for you to enter the appropriate data for Guardian to communicate with your correctly configured LDAP server The Lightweight Directory Access Protocol is an application protocol for querying and modifying directory services running over TCP IP A directory is a set of objects with similar attributes organised in a logical and hierarchical manner LDAP can be used to access many different types of directory services including Microsoft Active Directo
20. ions trademarks copyrights or other intellectual property rights covering subject matter in this document Except as expressly provided in any written licence agreement from Mako Networks its parent or associate companies the furnishing of this document does not give you any rights or licence to these patents trademarks copyrights or other intellectual property Page 136 e Warranty Software Support support makonetworks com Web site M al ko www makonetworks com NETWORKS
21. is field enables you to block URLs that contain a string of letters or numbers For example you may wish to block all URLs that contain the word mail If so enter the word mail in the Add Custom Banned URL Expression field If you wanted to block all com sites with the word mail you would enter mail com By default the categories you add on this page will apply to Everyone Anytime 4 3 Sites gt Custom Categories The Custom Categories screen lets you create your own blacklists or whitelists if you choose to allow them To create a customised category list Enter a category name this will appear in future drop down selections m Enter a brief description for your category e Guardian Setup 9 WWW MAKONETWORKS COM Add when f nished To add URLs to your category Click the edit icon e This pop up will appear Name Audio Technology e g Time Wasting Sites Description Headphones speakers and sound systems e g Sites with games movies and quizzes Save You can add or remove Domains e g cnn com or URLs e g cnn com sports individually using the below form Domain URL e g cnn com or cnn com sports Add Remove Use the below form to replace the contents of this category with the contents of the file The file must be formatted so that each line contains a single Domain e g cnn com or URL e g cnn com sports The file may be compressed using gzip or winzip The file can be no
22. of content your network has access to om yusi ge G Mako Mako Mako Mako Sale S Sue OMi Suit Shae Sake Sale Sli O Mako Mako Make Make e Guardian Setup 20 WWW MAKONETWORKS COM 11 Warranty 1 Standard Limited Warranty If the products purchased hereunder are resold by a distributor or reseller to an end user customer pursuant to the terms hereof in their original unmodified unused condition Purchaser shall pass on to its customers or keep as applicable for internal use the MAKO NETWORKS LTD standard limited warranty for the products as summarized in documentation supplied with the product and including provisions and limitations set forth below The Manufacturer warrants the Mako Appliance for one 1 year The Warranty begins on the date of purchase as shown on your providers invoice 2 Express End user Limited Warranty Each MAKO NETWORKS LTD product purchased hereunder is warranted against defect in material and workmanship and will substantially conform to MAKO NETWORKS LTD product documentation for the period set forth in the documentation supplied with the product following delivery to end user the Warranty Period This warranty extends only to end user and will not extend to nor may it be assigned to any subsequent user Purchaser or user of a MAKO NETWORKS LTD product whether such MAKO NETWORKS LTD product is alone or incorporated into end user s product 3 Exclusions The express warranty
23. ry If your business already uses an LDAP accessible application to store usernames and passwords you can continue to use this central repository with Guardian IP Address 192 168 1 254 Q e g 192 168 1 254 Port 3268 e g 3268 for Active Directory 389 for OpenLDAP LDAPS not supported Admin cn SysAdmin dc Workgroup1 e g Username cn Administrator cn Users dc example dc com Admin e Password Password Again Root DN dc Workgroup1 e g dc example dc com amp objectClass user sAMAccountName e g amp objectClass user Search Query an n sAMAccountName s Group Attribute Save memberOf e g memberOf In order to enter the relevant information you should consult with the System Administrator for your LDAP server Each server is different and can be configured in many ways Guardian requires Simple Authentication enabled to be able to communicate with an LDAP server e Guardian Setup 15 WWW MAKONETWORKS COM 4 8 Users and Groups gt Local Users Guardian allows you to force users to authenticate themselves before accessing the web You can create a list of users with their respective usernames and passwords in this section You do not need an external LDAP server in order to use this local authentication your Mako will identify the users and control their web browsing according to the rules you choose Username Fullname Option Username john johnson e g johnd Fullname John Johnson e
24. set forth above is contingent upon the proper use of aMAKO NETWORKS LTD product in the application for which it was intended and will not apply to any MAKO NETWORKS LTD product that has been i damaged during shipping ii modified or improperly maintained or repaired by a party other than MAKO NETWORKS LTD or its designees or iii subjected to unusual physical or electrical stress This includes operation of the product outside the Operating Specifications of the product 4 Limitation of Remedy In the event a MAKO NETWORKS LTD product fails to perform as warranted MAKO NETWORKS LTD sole and exclusive liability and end user s only remedies for breach of this warranty shall be at MAKO NETWORKS LTD s option to repair replace or credit an amount not exceeding the Purchaser s purchase price of each product found to be defective provided that 4 1 End user complies with the rejection and warranty procedures contained in Section 5 below and returns the MAKO NETWORKS LTD product that the end user considers defective for examination and testing 4 2 MAKO NETWORKS LTD shall not be liable under this warranty if testing and examination by MAKO NETWORKS LTD discloses that the MAKO NETWORKS LTD product has been modified or altered in any manner after it was shipped by MAKO NETWORKS LTD 4 3 MAKO NETWORKS LTD shall not be liable under this warranty if testing and examination by MAKO NETWORKS LTD discloses that the alleged defect in the
25. u add on this page will apply to Everyone Anytime e Guardian Setup 8 WWW MAKONETWORKS COM 4 2 Sites gt Custom Sites The Custom Sites screen allows you to either allow or deny access to specific websites Everyone Anytime Show Site URL Action Delete www inappropriate shennanigans com N e The above rules apply to Everyone all the time Enter a site or URL Group Everyone Group Setup gt Time Anytime z Time Setup gt Action Allow ODeny Save Expression i test Group Everyone Group Setup gt Time Anytime gt Time Setup gt Use true regular expression syntax A URL regular expression matches part of a URL By default simple expressions are enabled where an astrix character is a wildcard You can enable true regular expressions below which are very powerful but are complex to write A simple expression might be webmail When saved simple expressions are converted tn trite raniilar aynraccinne en what vai entar here will lank clinhtly differant whan nlarard in To allow or deny access to a specific website Type its URL in the Add Custom Site Rule field m Click Allow Deny m Save when finished You may want to allow a site if one of the other Guardian configuration options is blocking it For example you may have blocked access to Drug related sites in the Site Categories section but want to allow users to visit a chemist site 4 2 1 Add Custom Banned URL Expression Th
26. u to quickly and easily manage access to web content from anywhere in the world using the Content Management System or CMS Guardian enforces your acceptable use policy and protects your business from legal liabilities that could arise from Internet misuse Guardian lets you filter by Mako provided Blacklists Select from pre defined automatically updated site categories to block or allow User created Blacklists Upload your own blacklists which you can use to block or allow Custom sites Enter your own URLs Phrases Select different pre defined phrase types or groups to block Custom Phrases Create your own phrase categories User based Rules Filter by individual users who authenticate via the Mako or your own LDAP directory server Time based Rules Specify different times for different rule sets 2 2 Guardian Management Once setup is completed Guardian controls access to Internet content without any user interaction required Guardian is managed through the CMS accessible through a web browser from anywhere in the world The CMS provides the flexibility to tailor your policies on demand Blacklists are automatically kept up to date for you You choose exactly what you want to allow and what you want to deny on your network 2 3 Content Management System CMS This manual is to be used in conjunction with the CMS Manual The CMS Manual provides you everything you need to know about setting up a Mako appropriately for your system
Download Pdf Manuals
Related Search