Home

"user manual"

1. Active Connections Tus stor Users History Links Snagit 5j URL History See which sites are visited most often Use this monitor to show all web accesses done grouped by URL in descending order of popularity E Last Web Access Data collected from 0 0 31 10 2005 cB Configuration Bytes Real filetypes fl Access Permissions 10 130 130 54 64432 442890430 6220791 html 6090 jpg 117 gif 4463 css 78 General Options im chatanywhere net 15978 16532760 1039 html 11202 gif S0 redir 27 cachec te Site Rating update gfi com 9184 1077593811 42511 html 84 zip 205 redir 288 authen 2 Web Traffic Scanning www afi com 7268 24809962 html 515 jpg 230 gif 1422 flash 6 BitDefender www_ afimalta com 5492 20942155 1791290 html 567 jpg 202 gif 1219 flash 4 K Kaspersky 192 168 0 3 3273 33062616 26918 html 392 gif 43 css 4 j script 4 aut I Norman 192 168 0 224 2701 14392130 9828311 html 335 jpg 1 gif 47 css 2 j script 192 168 0 27 2573 8703144 2896654 html 396 gif 31 css 2 j script 2 rec G2 General search yahoo com 2491 112387200 13 html 2326 redir 158 errors 3 E pa 2 Internet Screenshot 23 URL History view The URL History view shows the URLs sites that were most frequently accessed through ISA Server by network users The information shown is sorted in descending order of popularity most popular URL is listed on top and includes 34
2. user is allowed fthe URL site P intemal cache to access the 1 d target URL i iia i i Internet 4 Deny access Access to the requested URL blocked by ISA Server Steps performed User E ae eae by ISA Server Figure 2 Site Rating process flow GFI WebMonitor can check for adult content in the URLs which users want to access This is achieved by querying Yahoo SafeSearch which is an online database that classifies and categorizes various sites on the Internet When a user requests access to a site GFI WebMonitor will query the Yahoo SafeSearch database for the Content Type held by that target URL If the online web filter classifies the site as having adult content GFI WebMonitor will add the target URL to the Adult Destination Set on the ISA Server If the ISA Server is configured to block access to the sites listed in the Adult Destination URL Set the user will be denied access to that site The benefits of a web based content filter It is estimated that three to five million websites are newly established or renamed each week This means that administrators strive to maintain their local content filter databases updated Missing one update might jeopardize the accuracy of a content filtering system GFI WebMonitor performs content filtering through a web based filter and does not require a locally maintained filter database All the required filter data is stored on the remote online database which
3. Adult Destination URL Set the user will be denied access to that site NOTE 1 GFI WebMonitor will retain the classification of the last 3000 sites accessed Every time a request to a target site is made GFI WebMonitor will check if the requested URL is listed in its internal GFI WebMonitor 3 Site Rating 21 cache GFI WebMonitor will query the target online classification database only if the requested URL is not listed in its cache NOTE 2 GFI WebMonitor handles the adding of newly detected adult sites to the Adult Destination URL Set ISA Server handles the blocking of the connections to the URLs listed in the Adult Destination URL Set NOTE 3 The Destination URL Set Adult is created on the ISA Server during the installation of GFI WebMonitor To restrict user access to adult rated sites you must manually configure a rule on your ISA Server which blocks the connections to the URLs listed in the Adult Destination URL Set NOTE 4 You can change the name and category of the Adult Destination Set from the SiteJudge js script This script is located in the installation folder of GFI WebMonitor For more information on Yahoo SafeSearch visit http help yahoo com help us ysearch basics basics 16 html E http monitor isa Microsoft Internet Explorer File Edit View Favorites Tools Help ay Qa La gt x 2 A p Search Sc Favorites A R mw rel A Address e http monitor isa zl Go GFI WebMonitor 8
4. need to manually delete the target site from the Adult Destination URL Set to stop ISA Server from blocking access Viewing the contents of the Adult Destination URL Set on ISA Server The Adult Destination URL Set is the ISA Server container in which GFI WebMonitor will add the adult rated URLs classified by the Site Rating processing engine For instructions on how to access and maintain the Adult Destination URL Sets on your ISA Server refer to the Maintaining the ISA Server Adult Destination URL Sets section in the Common ISA Server Setup Tasks chapter 24 Site Rating GFI WebMonitor 3 Web Traffic Scanning Introduction GFI WebMonitor 3 Web Traffic Scanning is the process which GFI WebMonitor performs on data objects which are downloaded through the ISA Server During Web Traffic Scanning GFI WebMonitor performs the following functions on the downloaded data objects 1 Extracts the HTTP Content Type signature as advertised in the HTML code 2 Detects the real filetype of the object by analyzing the first sets of bytes downloaded against a filetype signature database 3 Uses the advertised HTTP Content Type and detected real filetype data to block malicious or unwanted files ISA Server Server WebMonitor Filter isamon2 dll GFI WebMonitor Antivirus Scanners bitdefender KAPER KY 2 NORMAN Figure 5 GFI WebMonitor scan web traffic using the supported anti vi
5. GFI WebMonitor Manual By GFI Software Ltd http www gfi com Email info gfi com Information in this document is subject to change without notice Companies names and data used in examples herein are fictitious unless otherwise noted No part of this document may be reproduced or transmitted in any form or by any means electronic or mechanical for any purpose without the express written permission of GFI SOFTWARE Ltd GFI WebMonitor is copyright of GFI SOFTWARE Ltd 2000 2005 GFI SOFTWARE Ltd All rights reserved Version 3 0 Last updated November 24 2005 Contents Introduction 1 What is GFI WebMonitor for ISA Server eccccceeceeseceeeeeeeeaeeeeeeeseeeeesaeesseaeeneeeeseaees 1 wr 1 Proactive content filtering and Access Control sse 3 Web Traffic Scanning i cione Rc ROT REESE DAE RSUR DAR CUTE SERIE beu Runs 4 Installing GFI WebMonitor 5 GFI WebMonitor system requirements essssssseseneenennenen nnne 5 Installing GFI WebMonitor sssssseseseseeeeeeeeennneeeen nennen nennen nnn nens 5 Access policy for adult sites on the ISA Server ssssssssssseeee 8 Entering your license key after installation ssessseseseeeeeennnns 8 Advanced GFI WebMonitor deployments sse 9 Deploying and using GFI WebMonitor on multiple ISA Servers or ISA Server arrays nennen 9 Accessing GFI WebMonito
6. ofl Screenshot 39 List of existing Destination Sets GFI WebMonitor 3 2 Click on the Policy Elements gt Destination Sets node A list of existing Destination Sets will be displayed in the right pane Adult Properties 24x General Destinations Destinations in this set Name IP Range www chikas com www pornokino com www thehun com OK Cancel Apply Screenshot 40 Properties dialog Viewing the URLs contained in the Adults Destination Set 3 Right click on the entry Adult and select Properties 4 Go to the Destinations tab to see the list of URLs which were added by GFI WebMonitor in the Adult Destination Set NOTE You can maintain the list through the Add Edit and Remove buttons respectively Accessing the Adult Destination Set on ISA Server 2004 To view the list of sites which are presently contained in the Adult URL set of ISA Server 2004 1 Launch the ISA Server Management console 2 In the left pane select the Firewall Policy node 3 In the task pane click on the Toolbox tab GFI WebMonitor 3 Common ISA Server Setup Tasks e 45 E Microsoft Internet Security and Acceleration Server 2004 zj qun Internet Security and Acceler i rosoft Security amp E kg VIRTUALSPACES spacedomain com nternet T EE Monitoring Acceleration Server2004 amp Firewall Policy gt Virtual Private Networks VPN 3S Configuration Firewall Polic anne wA ony MP Qu Name
7. Site Rating section 3 Select the Enable Site Rating option 4 Click on the Apply button to save your configuration settings To disable Site Rating 1 Click on the Configuration gt Site Rating node 2 Go to the Site Rating section 3 Select the Disable Site Rating option 22 Site Rating GFI WebMonitor 3 4 Click on the Apply button to save your configuration settings Excluding Users IPs from Site Rating E http monitor isa Microsoft Internet Explorer File Edit View Favorites Tools Help Q ax 2 x e v 7 Search Sc Favorites lt gt gU a rel A Address http monitor isa Je ums Q snam ps GFI WebMonitor Monitor Site Rating Active Connections URL History Configure automatic web site rating and access control policy Users History Last Web Access Site Rating a Configuration amp Exceptions Users Computers amp Access Permissions S General Options Site access requests performed by the users or from the computers in the list below will not be passed to the Site 3 Site Rating processing engine A Web Traffic Scanning S BitDefender W Kaspersky JasonM Add excluded IP or User E Norman DavidF G2 General Version Information amp Licensing 4B How to Purchase e Support Center 4B GFI WebMonitor e GFI LANguard N S 5 Users IPs excluded from Site Rating e GFI LANguard S E L M Exceptions Websites PIPER TERMES
8. Action Protocols From Listen mri GFIwebMonitor allow E A Local Host Content Types Schedules Network Objects Mew Edit Delete E Last Default rule Deny lil Traffic Gi Network Sets 39 Computers E Address Ranges E Subnets Gi Computer Sets E Ge URL Sets Jj key WebMonitor update servers jl E Domain Name Sets A OE web Listeners 4 Done Screenshot 41 List of existing Destination Sets 4 Go to the Network Objects section and expand the tree node URL Sets 5 Right click on the entry Adult and select Properties General w Name 1 If the DNS is not configured correctly rules using URL sets AJ may not be applied as expected URLs included in this set applicable For HTTP traffic only Example http microsoft com somepath 3 ici deviantart com i9 kyberia sk new Rene ose Description optional Screenshot 42 Properties dialog Viewing the URLs contained in the Adults DestinationSset The General tab of the Adult URL set properties lists the URLs which were added by GFI WebMonitor NOTE You can maintain the list through the Add Edit and Remove 46 Common ISA Server Setup Tasks GFI WebMonitor 3 Troubleshooting Introduction The troubleshooting chapter explains how to go about resolving any issues you might have We also recommend visiting the GFI support site Knowledge Base GFI maintains a kn
9. Content Scanning is excluded from 1 ISA Server gateway Content Scanning 2 d 2 Check if the URL is excluded from Content Scanning Virus Scan the downloaded Block object download before it reaches the client Objects being X downloaded ES Send the object io Fi WebMonit itor If listed allow download URL is excluded from Content Scanning Figure 3 Web Traffic Scanning GFI WebMonitor can optionally perform Web Traffic Scanning During Web Traffic Scanning downloaded objects are checked for viruses spyware and Trojans using the supported virus scanning engines The paid version of GFI WebMonitor comes enabled with Norman and BitDefender free for the first year Kaspersky can be added on for an additional charge During Web Traffic Scanning the virus scanner s inspect all HTTP and FTP only FTP passing via HTTP proxy server traffic going through the monitored ISA Server Web Traffic Scanning blocks all infected files before reaching the client Dangerous files filetypes such as Trojan downloader programs often attempt to penetrate a system masked as innocuous files During Web Traffic Scanning GFI WebMonitor uses its built in file signature scanner to analyze the signatures of HTTP FTP files Filetype signatures are bytes which define the true type and content of a file GFI WebMonitor will immediately block dangerous filetypes before reaching the client For more informat
10. Done 4D Internet Screenshot 16 Configuring filetypes to scan block To configure the Web Traffic Scanning action for the listed filetypes 1 Click on the Configuration Web Traffic Scanning node 2 Go to the File Type processing options section 3 From the list of filetypes supported click on the filetype to configure From the action combo box specify the way which GFI WebMonitor is to act on downloaded objects with the indicated filetype For every object type the following actions are supported Block block all objects that match the indicated filetype Allow Do not block scan for viruses do not block or scan downloaded objects that match the indicated filetype E AV Scan Hide Progress from User files which match the indicated Content Type will be downloaded and scanned for viruses The user will not be aware that GFI WebMonitor is processing this file prior to passing it on AV Scan Show Progress to User files which match the indicated Content Type will be downloaded and scanned for viruses The user will be informed that GFI WebMonitor is processing this file prior to passing it on Web Traffic Scanning 27 7 Downloading status Microsoft Internet Explorer iD x File Edit View Favorites Tools Help ay i Qe ys ix 12 _ Search S Favorites gt 4 rel Address a http www eere energy gov consumerinfo pdfs eewindows pdf z Go Links snaal
11. Monitor Links Snagit 5 Site Rating m Active Connections URL History Configure autornatic web site rating and access control policy When a user tries to access a site the target URL is queried against the Yahoo SafeSearch database to check the category nature of the site Ifthe site is rated as being an adult site WwebMonitor will add that site to the Adult Destination URL set of the ISA Server Users History Last Web Access a Configuration amp Access Permissions i General Options Pe A Web Traffic Scanning 3 BitDefender W Kaspersky To automatically manage adult site content access control you must configure a rule on your ISA Server to block th connections to the URL s listed in the Adult Destination URL set GFI WebMonitor will handle adding newly detecte sites to the Adult Destination URL set ISA Server will handle the blocking ofthe connections to the URLs listed in Adult Destination URL set Norman Enable Site Rating G2 General Disable Site Rating Version Information amp Licensing 4 How to Purchase e Support Center 4B GFI WebMonitor Exceptions Users Computers e GFI LANguard N S 5 e GFI LANguard S E L M Exceptions Websites v al rf Internet Screenshot 12 Site Rating Adult amp Site Rating section To enable Site Rating 1 Click on the Configuration gt Site Rating node 2 Go to the
12. Scanning 2 4 15 25 26 27 28 29 30 31 50 e Troubleshooting GFI WebMonitor 3
13. accessed Reset data Data collected from 0 0 22 9 2005 Bytes 130 16 130 12 51195 566895012 5633620 63 im chatanywhere net 19 www googl 130 16 130 18 12585 982066941 128461 590 www google corn 49 www google cc Refresh URL domains accessed hits de Configuration Access Permissions General Options a2 Site Rating ofimalta hera 11642 15682502 461 10 im chatanywhere net 10746 10 130 a Web Traffic Scanning 130 16 130 185 i0116 268459438 2 update gfi corn 10099 support gfi cc e BitDefender alunaltshegha ra A984 BBLEDDE MERGE ER 201 d SSETSU ADS x Done i CEE p mem 4 Screenshot 26 Users History view The Users History view shows the Internet activity which passed through the ISA Server of all your network users The information shown in this sub node is sorted in descending order of user hits most active user is listed on top and includes e The username IP e The total number of sites hits visited accessed by each user e The total number of bytes that were received sent by each user e The URLs accessed by each user Use the Users History view to gain access to even more detailed information on the user s Internet activity Address http JAE Go GFI WebMonitor 38 Monitor Active Connections 122 URL History im chatanywhere net 19 www google com 1 rad microsoft com 19 E 10 130 130 54 45712 update gfi com 1 im
14. achieve automatic proactive blocking of sites which contain objectionable adult material such as pornographic images candid scenes offensive words and links to adult sites Query online database for URL Site Rating Check if the user IP making the request is in the list of user IPs excluded from Site Rating If Adult rated If not listed Check if the URL Add the URL to is included in the the Adult list of sites Destination Set excluded from on the ISA Site Rating Steps performed by l GFIWebMonitor If not listed ISA Server checks its rules i lo see whether Anow access to user is allowed the URL site to access the target URL tion Check if the URL is listed in the intemal cache Internet Steps performed by ISA Server Figure 4 Site Rating process flow GFI WebMonitor can check for adult content in the URLs which users want to access This is achieved by querying Yahoo SafeSearch which is an online database that classifies and categorizes various sites on the Internet When a user requests access to a site GFI WebMonitor will query the Yahoo SafeSearch database for the Content Type held by that target URL If the online web filter classifies the site as having adult content GFI WebMonitor will add the target URL to the Adult Destination Set on the ISA Server If the ISA Server is configured to block access to the sites listed in the
15. m v rf Internet Screenshot 13 Site Rating node Users IPs excluded from Site Rating You can configure GFI WebMonitor to block target URL requests made from specific users Computer IPs to the Site Rating processing engine This means that the URLs of sites visited by users listed in the user IP exception list will not be checked and rated through the Yahoo SafeSearch engine To configure User IP exceptions 1 Click on the Configuration gt Site Rating node 2 Go to the Exceptions Users Computers section 3 Specify the username or IP address of the computer that will be excluded from the Site Rating process and click on the Add button 4 Click on the Apply button to save your configuration settings NOTE If the target site is already a member of the Adult Destination URL Set ISA Server will still block access to it You will need to manually delete the target site from the Adult Destination URL Set to stop ISA Server from blocking access GFI WebMonitor 3 Site Rating 23 Excluding websites from Site Rating E http monitor isa Microsoft Internet Explorer File Edit View Favorites Tools Help ay Qs gt x E iA P Search Sc Favorites EA A gt PETER a rel A Address http Imonitor isa z Eco uns snagtt ps GFI WebMonitor 88 Monitor Site Rating E Active Connections E URL History Users History Configure automatic web sit
16. to save the configuration settings NOTE GFI WebMonitor can store up to a maximum of 3000 records in its website history cache Exceeding the maximum limit will cause random deletion of information from the history cache Whenever this happens a Data Overflow message is displayed at the bottom of the URL History page Alerting Options GFI WebMonitor will send an email notification on the occurrence of important events Important email notifications include warnings when anti virus definition files fail to update as well as warnings when the anti virus license will be approaching expiry To configure the recipient and mail server settings to use for email notifications 1 Click on the Configuration General Options node 2 Go to the Alerting Options section 3 Specify the following parameters e To Specify the address to where email notifications will be sent e From Specify the email address from where the email notification will be sent e SMTP Server Specify the IP address of the SMTP Server which will forward the email notifications e SMTP Port Specify the port through which the email transmission will take place 3 Click on the Apply button to save your configuration settings Extended Alerting Options GFI WebMonitor can be configured to send the target recipient email notifications every time the virus definitions are successfully downloaded and updated To enable extended Alerting O
17. web browsing time distribution From this graphical representation you can extract the following information e The time slice s during which each user makes most use of the provided Internet connection e The number of hours that each user is spending on Internet browsing e The period during which your web traffic is at its peak Through this information you can quickly identify users which abuse of their Internet privilege This helps you plan adequate Internet restriction policies and improve your bandwidth management To view detailed information on the user s Internet activity click on the respective username IP To reset the data collected by GFI WebMonitor click on the Reset Data button at the top of the Users History view Deleted data cannot be recovered undone NOTE The information displayed is not automatically refreshed Click on the Refresh button in the upper right of the view to update the information being shown onitor isa Microsoft Internet Explorer Eile Edit View Favorites Tools Help Gee di E x E A Pp Search Se Fevortes EA A GFI WebMonitor 38 Monitor LE Active Connections 2 URL History Last Web Access See the last 200 URLs accessed through the ISA Server Users History im g Configuration al Access Permissions Refresh GFIMALTA henson 130 16 130 68 16 49 26 2357 6732 Receiving Http status 502 Cont GFIMALTA sahara 130 16 13
18. 0 160 16 49 22 4525 Real filetype aif E General Options unauthenticated 130 16 130 173 16 49 21 2785 se Site Rating GFIMALTA sahara 130 16 130 160 16 49 21 557 A Web Traffic Scanning unauthenticated 130 16 130 12 16 49 22 125702 Real filetype html s BitDefender GFIMALTA esterph 130 16 130 137 16 49 22 945 application x javascript unauthenticated 130 16 130 12 16 49 22 1433 Real filetype gif gt 4 Dones 0 0 00000 TT TT mme zz W Kaspersky Screenshot 28 Last Web Access view The Last Web Access view shows the last 200 URLs accessed through your ISA Server The information shown in this sub node is sorted in descending order according to the time that the URL was accessed most recent listed on top and includes e The name of the authenticated user that accessed the URL e The IP address of the computer from where the URL was accessed GFI WebMonitor 3 Monitoring Internet activity e 37 e The time when the URL was accessed e The total number of bytes that were received sent by each user when accessing that site e The file Content Type s of objects downloaded from the accessed URL e The complete ungrouped URLs list that were accessed by the user To reset the data collected by GFI WebMonitor click on the Reset Data button at the top of the Last Web Access view Deleted data cannot be recovered undone NOTE The information displayed is not automatically refreshed Click
19. Adult Destination Set on ISA Server 2000 44 Accessing the Adult Destination Set on ISA Server 2004 45 Troubleshooting 47 IMtrOGUCTIO a 4 ai pest teehee neat Rie tea tic tdt 47 Knowledge Base ubl nete tetti di aee hate 47 We FOUN saie it eene ttf tae eit of rb f buen rude aeter fee fe 47 Build niotifICatioris 5 cte fd eet ct Perro ner PO Peer t od eere Eon a deve Rn 47 Index 49 ii e Contents GFI WebMonitor 3 Introduction What is GFI WebMonitor for ISA Server O Q Oa T URL Website s Deny Intemet Acess to All Selected users Figure 1 GFI WebMonitor complements the protection already provided by the ISA Server GFI WebMonitor is a lightweight monitoring tool designed as a plug in for Microsoft ISA Server It allows you to monitor the sites users are browsing and the files they are downloading in REAL TIME It also allows you to block web connections in progress as well as to scan traffic i e downloaded objects for viruses Trojans and spyware GFI WebMonitor is the perfect solution to transparently exercise a degree of control over users browsing habits and to ensure legal compliance in a manner that will not alienate your network users Features e Monitors web and FTP browsing in real time e Allows administrators to block web access or downloads in progress e Active Connection view shows all current web connection
20. Monitoring Internet activity GFI WebMonitor 3 e The URLs which were accessed e The number of times that this URL was accessed i e number of hits e The number of bytes that were Received Sent from each URL e The real filetypes accessed from each URL e The URL Category e The users IPs that have accessed the URL e The Site Check results E http monitor isa Microsoft Internet Explorer File Edit View Favorites Tools Help ay a 1 E B E 5 2 Search Se Favorites raie Ken a Wj is REEL DE n rn a T gt GFI WebMonitor Monitor OK checked 20 pages Active Connections OK Microsoft Windows El ETHER Adult Yahoo SafeSearch filtered 1 Added to Adult Users History OK Personal Information Management Software E Last Web Access OK checked 19 pages d Configuration OK checked 20 pages OK Suspicious filtered 2 OK Computers and Internet gt Technical Gui OK checked 1 pages Content didn t trigger check OK checked 5 pages OK Computers gt Industry Information Access Permissions General Options sty Site Rating A Web Traffic Scanning S BitDefender We Kaspersky X OK Not Indexed n ptt s E fof EO oap nternet Screenshot 24 Site check results You can also click on any of the URLs listed to gain access to more information about how it was accessed including a full list of users who have accessed tha
21. S JasonM 2 BitDefender J Kaspersky E Norman C General Version Information B Licensing e How to Purchase al E amp Done Screenshot 18 Enumerating Users IPs excluded from Web Traffic Scanning Internet You can configure GFI WebMonitor to block objects downloaded by specific users Computer IPs to the Web Traffic Scanning processing engine This means that the data objects downloaded by users listed in the user IP exception list will not be run against the Web Traffic Scanning action parameters To configure User IP exceptions 1 Click on the Configuration Web Traffic Scanning node 2 Go to the Exceptions Users Computers section 3 Specify the username or IP address of the computer that will be excluded from the Web Traffic Scanning process and click on the Add button 4 Click on the Apply button to save your configuration settings GFI WebMonitor 3 Web Traffic Scanning 29 E http monitor isa Microsoft Internet Explorer Eile Edit View Favorites Tools Help Vid Geax Mi x E 75 Jo Search Iy Favorites 3 44 w a rel 3 Address a http monitor isa GFI WebMonitor z Eo us Esa jj 8 Monitor E Active Connections Extended File Type processing options URL History Exceptions Users IPs B Exceptions Websites Data object downloads from websites in the list below will not be passed to the Web Traffic Scanning pr
22. ation is used by GFI VebMonito URL History to identify the type of processing action to perform on this object Users History a E Last Web Access Specify which data objects are to be allowed blocked and scanned for malware through the selected antivirus engine s Gl Configuration Action B Access Permissions Cab archives cab AV Scan Hide Progress from User z General Options Java package jar Description fe Site Rating Ax TE Ig Pdf document m PowerPoint Show pps The files which have their HTTP header Content type application x gzip application x gzip GFI WebMonitor 3 m Mp3 audio compressed OR their signature recognised as that 1 B Ms package msi of a Gzip archive gz file will be downloaded and E Powerpoint ppt 1 scanned for viruses The user will not be aware 1 r S BitDefender WK Kaspersky IN Norman that GFI WebMonitor is processing this file prior to i m Excel document passing it on 1 ee E Word doc rupe locker Ea version Information E Rar archive Licensing Antivirus Scan Hide Progress from User m Executable B Zip m Javascript B XML xml xsl 4B How to Purchase KI Support Center GFI WebMonitor GFILANguard N 5 5 KI GFI LANguard S E L M E L Bl Antivirus Scan Show Progress to User I Allow Do not block scan for viruses 4B GFI LANguard P S C GFI Network Server MY jad 4 gt 4 gt
23. c Scanning action for the listed filetypes 1 Click on the Configuration Web Traffic Scanning node 2 Go to the Extended File Type processing options section 3 Specify the HTTP Content Type of the object to process 4 Specify the action to take when GFI WebMonitor meets data objects of same filetype NOTE Actions configurable for the extended filetypes are the same as the actions configurable for the default supported filetypes i e Block E Allow Do not block scan for viruses 28 e Web Traffic Scanning GFI WebMonitor 3 EJ AV Scan Hide Progress from User E AV Scan Show Progress to User 5 Click on the Apply button to save your configuration settings E http monitor isa Microsoft Internet Explorer File Edit View Favorites Tools Help a Qe M x 5 75 Jj Search S c Favorites gA 2 eg a dd A Address e http monitor isa GFI WebMonitor 88 Monitor Active Connections URL History Users History Last Web Access ze Links Snagit pj File Type processing options Extended File Type processing options E Exceptions Users IPs Data object downloads performed by the users or from the computers in the list below will not be passed to the Web Tr Scanning processing engine S Configuration E Access Permissions gt General Options Users IPs excluded from scanning y edid pr 130 16 130 13 Add excluded IP or User A ERE
24. ch is set by default to http monitor isa e SecondlSAServerAddress variable containing an IP address which is set by default to http 1 1 1 1 This variable must contain the same value that has been specified for the ThisISAServerAddress variable NOTE Assign IP addresses to both of the above mentioned variables in order to avoid configuration problems 3 After you have completed all the required changes restart all ISA Servers where GFI WebMonitor is installed i e the ISA Servers where the changes to the DownloadingPage html have been made 4 To open GFI WebMonitor interface page of a particular ISA Server you must call it by the address specified in the relative ThislSAServerAddress or SecondlSAServerAddress variables e g http 130 168 0 1 GFI WebMonitor 3 Installing GFI WebMonitor e 9 Accessing GFI WebMonitor Introduction Use GFI WebMonitor web based interface for configuration and monitoring The GFI WebMonitor interface can be launched in two ways e On the ISA Server on which GFI WebMonitor is installed by clicking on Start Programs gt GFI WebMonitor GFI WebMonitor e Remotely over the network using Internet Explorer Launch Internet Explorer by clicking on Start Run and typing in iexplore exe Then go to the following URL http monitor isa NOTE On a default installation only the administrator on the ISA Server machine will be allowed access to GFI WebMonitor 3 http
25. e authorized users IP list will be allowed access To add a user or IP to the access permissions list 1 Click on the Configuration gt Access Permissions node 2 Specify the username in the format DOMAIN user or IP e g 192 168 0 3 of the computer from which requests to access GFI WebMonitor will be allowed and click on the Add button 3 Click on Apply to save the updated configuration settings NOTE When using IP Access Control you must assign a fixed static IP to every computer which is allowed access to GFI WebMonitor This is required in order to avoid having to change your list of allowed IPs every time that a computer is rebooted or served a different IP by the DHCP Server GFI WebMonitor 3 General options Use the General options node to configure e The retention period of the collected Internet activity data e The email alerting options Data Retention Options Mhttp monitor isa Microsoft Internet Explorer File Edit View Favorites Tools Help ay Q Back 1j e 75 E Search Sy Favorites 48 gt e m rel ry Address http monitor isa v Eco ums Qs ps GFI WebMonitor a Monitor Configure the data retention policy as well as alerting options for email notifications on important events a Z Active Connections E URL History Bi Data Retention Options E Users History For monitoring and reporting GFI WebMonitor collects and retains data related to web requests in memory Unl
26. e rating and access control policy Site Rating Exceptions Users Computers B Exceptions Websites E Last Web Access g Configuration 8 Access Permissions hj General Options 2 A Web Traffic Scanning 3 BitDefender WK Kaspersky Site access requests to websites which are presentin the list below will not be passed to the Site Rating processir engine Websites excluded from Site Rating E Norman wwrw gfi com Add excluded website G2 General pes Jw gfi com Version Information B Licensing 4 How to Purchase 4B Support Center 4B GFI WebMonitor e GFI LANguard N 5 5 4B GFI LANguard S E L M ap Internet Screenshot 14 Site Rating node Websites excluded from Site Rating You can configure GFI WebMonitor to block requests made to specific sites for Site Rating processing This means that the URLs of sites listed in the website Site Rating exception list will not be checked and rated through the Yahoo SafeSearch engine To configure website exceptions 1 Click on the Configuration Site Rating node 2 Go to the Exceptions Websites section 3 Specify the URL of the website that will be excluded from the Site Rating process and click on the Add button 4 Click on the Apply button to save your configuration settings NOTE If the target site is already a member of the Adult Destination URL Set ISA Server will still block access to it You will
27. es dlls etc This may cause both software to conflict and perform incorrectly if installed and run simultaneously on the same computer It is recommended that you uninstall GFI DownloadSecurity before installing GFI WebMonitor 1 Logon to your ISA Server and launch GFI WebMonitor installation wizard by double clicking on webmonitor3 exe 2 As soon as the welcome dialog appears click on Next to start the installation process 3 Choose whether you want the installation wizard to check for a newer version of GFI WebMonitor on the GFI website Click on Next to continue 4 Read the license agreement Select Accept the Licensing agreement and click on Next to continue GFI WebMonitor 3 Installing GFI WebMonitor 5 5 Choose whether you want to make a clean install or import the settings of a previously installed build version of GFI WebMonitor into the new installation Click on next to continue NOTE This dialog is shown only when installing on a computer where GFI WebMonitor was already installed fe GFI WebMonitor for ISA Server Setup 0 x LP AM WebMonitor Configuration Access Permissions Specify who will be able to access the GFI WebMonitor Web interface By default only an administrator logged in on this computer will be authorized to access the GFI WebMonitor web interface GFI w ebMonitor can be configured to allow other users computers to access its web based interface over the network Enter the u
28. ess the E Last Web Access history data is reset it can grow to a level which will effect the performance of GFI WebMonitor You can configure GFI WebMonitor to automatically reset its history data automatically for you Configuration B Access Permissions Configure the data retention policy for this installation of GFI WebMonitor 4 General Options will reset the Connection data history list manually Fe Site Rating Automatically reset the Connection data history list every day at midnight Ak Web Traffic Scanning CS BitDefender WE Kaspersky N Norman NOTE You can resetthe connection data history whenever required by clicking on the Reset button included atthe top of the monitoring reports URL History User history and the Last Web Access sub nodes C General Version Information z B Licensing Alerting options 4B How to Purchase Specify the mail server and recipient settings to use when sending important email notifications Support Center 4B GFI WebMonitor To JasonM GFICOM GFI LANguard N S S GFWMGaficom F GFI gione SELM iu GPWMGgfi cam guard S E L M SMTP Server 130 15 130 13 dB GFI LANguard P S C SMTP Port 25 d GFI Network Server Monitor Apply NOTE Important email notifications include warnings when antivirus definition files fail to update as well as warnings when Antivirus updates license will be approaching expiry amp 4 Internet Screenshot 10 Gene
29. essary access permissions to GFI WebMonitor GFI WebMonitor 3 Accessing GFI WebMonitor 11 3 You are trying to access GFI WebMonitor using a user account which has not been given the necessary access permissions to GFI WebMonitor 4 Access Denied Authenticated user message 5 Access Denied Non Authenticated user message Configuring Internet Explorer to use the ISA Server as its proxy 1 Click on Start Settings Control Panel gt Internet Settings 2 Click on Tools gt Internet Options Connections gt LAN settings 3 Specify the IP and proxy port of the ISA Server on which GFI WebMonitor was installed Giving the computer access permissions to access GFI WebMonitor On a computer from which you can access GFI WebMonitor interface 1 Launch GFI WebMonitor configuration interface 2 Click on the Configuration Access Permissions node 3 Specify the IP e g 192 168 0 3 of the computer from which requests to access GFI WebMonitor will be allowed and click on the Add button 4 Click on Apply to save the updated configuration settings Giving a user account access permissions to access GFI WebMonitor On a computer from which you can access GFI WebMonitor interface 1 Launch GFI WebMonitor configuration interface 2 Click on the Configuration Access Permissions node 3 Specify the username in the format DOMAIN user of the user from which requests to access GFI WebMonitor will be al
30. g lenta ru 1 ad2 rambler ru 1 support afi com 173 www gfi com 2214 forums gfi com 1059 www gfimalta com 246 ak imgag com 1 backup gfimalta com 4 dE Configuration crl micrasoft com 3 kbase gfi com 265 images gfi com 205 customers gfi com 72 www microsoft com 179 www digium com 1 Access Permissions server iad liveperson net 1 ads isoftmarketing com 18 General Options banners isoftrnarketing com 12 support microsoft com 110 P forums isaserver org 107 images isaserver org 48 office microsoft com se Site Rating 3 msdn microsoft com 55 update microsoft com 16 adwords google com dli Web Traffic Scanning Mccesaed URES 1 i2 microsoft com 27 i microsoft com 35 i3 microsoft com 4 tnis Qsnagt 5j User or IP 130 16 130 12 Day time web usage P ce 1 hits over time E Last Web Access 192 168 0 224 1 www windowsnetworking com 1 momdy com 1 e BitDefender www plaxo com 1 www geektoals com 20 supportts gfisoftware com 152 metrics gfi com 97 on grailnetworks com 1 resellers gfi com 17 K Kaspersky fileserver 1 themes msn com 1 images afisoftware com 18 gt 3 na com 204 zi 4 36 e Monitoring Internet activity GFI WebMonitor 3 Screenshot 27 User History detailed information view This detailed information includes e The complete list of all URLs accessed by the selected user or from the selected computer e A graphical representation of the users
31. he new Access Rule will have the following configuration Name E Restrict user access to URLs in Adult Destination set Action Deny Traffic All outbound traffic Source Internal Anywhere Destination Adult Accepted user sets E To close the wizard click Finish EM Screenshot 38 Site and Content Rule Wizard Final dialog showing the configured rule details 9 Click on Finish The new Access Rule policy is now set up on your ISA Server 2004 to block all users from accessing the sites listed in the Adult Destination Set NOTE The adult Destination URL Set was created on the ISA Server by GFI WebMonitor installation Maintaining the ISA Server Adult Destination URL Sets 44 Common ISA Server Setup Tasks Accessing the Adult Destination Set on ISA Server 2000 To view the list of sites which are presently contained in the Adult Destination Set of ISA Server 2000 1 Launch the ISA Server Management console ELE ISA Management File Action View Help e amp mxm ad Internet Security and Acceleration Server 4 a4 Servers and Arrays TMJASON 44 Monitoring Alerts L Services L Sessions Reports TA Computer 3 Access Policy Site and Content Rules Protocol Rules C IP Packet Filters Publishing E Bandwidth Rules H Policy Elements Schedules Bandwidth Priorities y Destination Sets Client Address Sets Name Description _ Destinations Te
32. he true type and content of a file GFI WebMonitor will detect and block dangerous unauthorized files based on their filetype signature i e blocking of documents or executables based on their file signature rather than on their declared file extension e Automatic anti virus definition updates GFI WebMonitor periodically checks and downloads new anti virus definitions for its virus scanning engine s The frequency at which GFI WebMonitor checks for virus definition updates is customizable from GFI WebMonitor configuration interface e Email Notifications On the occurrence of important events GFI WebMonitor will send out administrative alerts via email notifications to a target recipient Important events include Failed updating of the virus definition files used by the virus scanning engine s Approaching of anti virus license expiry 2 e Introduction GFI WebMonitor 3 I i Check if the 1 Yahoo SafeSearch user IP making i the request is in the list of user 1 ie Rating IPs excluded from Site Rating If Adult rated If not listed Check if the URL t Add the URL to is included in the the Adult list of sites Destination Set excluded from on the ISA I I I I l I I I I l l 1 Site Rating Server I Steps performed by SHWebMonitor If not listed ISA Server Checks its rules Check if the URL to see whether Ajiow AN is listed in the
33. ion on filetype signatures visit http www garykessler net library file sigs html 4 e Introduction GFI WebMonitor 3 Installing GFI WebMonitor GFI WebMonitor system requirements e Microsoft Windows 2000 SP 3 or 2003 Server e Microsoft ISA Server 2000 not in firewall only mode OR Microsoft ISA Server 2004 Standard or Enterprise e Microsoft NET Framework version 1 1 e Microsoft Internet Explorer to access GFI WebMonitor e 20 MB free hard disk space Installing GFI WebMonitor Before you install GFl WebMonitor for ISA Server make sure e You are logged on as an administrator or any account having administrative privileges on the domain or computer s where GFI WebMonitor is being installed e You have Windows 2000 2003 Server and Microsoft ISA Server 2000 2004 installed and running e You have Microsoft NET Framework version 1 1 installed on the computer s on which you will be running GFI WebMonitor For more information on how to download install or check if Microsoft NET Framework 1 1 is running on your computer s visit http msdn microsoft com netframework downloads framework1 1 section1 e You do not have GFI DownloadSecurity installed on the same machine on which you will be running GFI WebMonitor e You close any other Windows application that is running on the computer where GFI WebMonitor is to be installed NOTE GFI DownloadSecurity and GFI WebMonitor make use of common services and librari
34. is constantly maintained and updated by third party content classification professionals The benefits of using a web based content filter include e Automatically updated and maintained URL block list e No local updates required This reduces administrative loads by eliminating bothersome list updating procedures and research e Adult sites are notoriously known for being accompanied by unwanted spyware Trojan installations Through an automatically managed adult site list you reduce the chances of your users GFI WebMonitor 3 Introduction 3 opening holes in your network through the installation of unwanted software and ActiveX controls which frequently accompany visited adult sites e Less bandwidth is consumed on non work related browsing e Less demand for local storage space Less physical storage space is required locally to host a detailed and up to date content filter database which is continuously increasing in size GFI WebMonitor will store only the blocked URLs which were requested by the company s internal users as opposed to the Yahoo SafeSearch filter database which includes the URLs of all sites that were accessed by a multitude of users around the world Perform scanning blocking based on HTTP content type 4 Perform filetype Signature Checks I e 6 block objects based Block the Object on filetype 3 Check if the user F requesting the URL If listed allow download User is excluded from
35. lowed and click on the Add button 4 Click on Apply to save the updated configuration settings Access Denied Authenticated user This message is shown when an authenticated user is denied access to the configuration When this happens both the IP and the username are listed in the error message 192 168 0 31SA2004DEV administrator Access to GFI WebMonitor for ISA Server was DENIED Access to GFI WebMonitor is allowed based on IP or ISA authenticated user name You can configure which users or IF s have access to GFI WebMonitor from http imonitor isa authenticated as allowed user or connecting from allowed IP address or directly editing WebMoncCfg bt in ISA main directory Please consult your administrator Screenshot 6 Access Denied Authenticated user On a computer with access to GFI WebMonitor interface 1 Launch GFI WebMonitor configuration interface 2 Click on the Configuration Access Permissions node 12 e Accessing GFI WebMonitor GFI WebMonitor 3 3 Specify the username in the format DOMAIN user or IP e g 192 168 0 3 of the computer from which requests to access GFI WebMonitor will be allowed and click on the Add button 4 Click on Apply to save the updated configuration settings Access Denied Non Authenticated user This message is shown when a non authenticated user is denied access to the configuration When this happens only the IP of the user trying to access GFI WebMonitor is listed in the er
36. lters will be displayed in the right pane Locating GFI WebMonitor Web Filter on ISA Server 2004 1 Launch the ISA Server Management console 2 Expand the Configuration node 3 Click on the Add ins node 4 In the right pane click on the Web filters tab GFI WebMonitor 3 Common ISA Server Setup Tasks e 39 Microsoft Internet Security and Acceleration Server 2004 BEE Eile Action view gt J Microsoft Internet Security a i TestInc2 Add ins EE Monitoring Z Firewall Policy Virtual Private Networks VPN Ei Configuration es Networks Description Direction Ver vendor Relative Path Priorit 5 Cache OWA Forms Based A Enables forms based cookie authe Incoming Web Requests 4 0 Microsoft R Corp CookieAuthFilter dll High 3 Add ins General 32 SecurID Filter Enables SecurID authentication Incoming Web Requests 4 0 Microsoft R Corp sdisa dll High c3 I5 Authenti s RADIUS authenti 4 0 Microsoft R Corp radiusauth dll High E ISAMON2 dll Link Translation Filter Enables link translation for published Incoming Web Requests 4 0 Microsoft R Corp LinkTranslation dl Medium 136 HTTP Fiter Filters HTTP traffic and enforces con Both 4 0 Microsoft R Corp HttpFilter cil Low Si mwi Screenshot 30 The GFI WebMonitor web filter listed under Add ins in ISA Server 2004 A list of plug in web filters will be displayed in the Web filters page i
37. monitor isa Microsoft Internet Explorer File Edit View Favorites Tools Help ay Ws i JB lt 4 3 Q Back gt ix E p Po Search Se Favorites 64 ge uU rel 4 3 Address 4 http monitor isa Go Links SnagIt 5j GFI WebMonitor ed Monitor E Active Connections Monitor E URL History E Users History Active Connections E Last Web Access See which connections are presently passing through the ISA Server Use this monitor to show all active web access connections Y ou can also interrupt undesired connections which are taking up Configuration bandwidth Access Permissions URL History E General Options See which sites are visited most often Use this monitor to show all web accesses done grouped se Site Rating by URL in descending order of popularity amp Web Traffic Scanning Users History e BitDefender See which sites users have been accessing Use this monitor to show a list of all the network K Kaspersky users and the URLs that they have accessed D Norman Last Web Access See the last 200 URLs accessed through the ISA Server G2 General X 4 L4 2 Done 4B Internet Troubleshooting GFI WebMonitor access troubles If you have trouble accessing GFI WebMonitor web interface chances are you are experiencing one of the following 1 Your Internet Explorer settings are not using the ISA Server as its proxy server 2 You are trying to access GFI WebMonitor from a computer which has not been given the nec
38. n the right pane Creating ISA Server access policy rules Creating an Access Rule policy on ISA Server 2000 1 Launch ISA Server 2000 Management console ERE ISA Management C x Action View amp Xm 3 E3 i Internet Security and Acceleration Server 4h Servers and Arrays J UCSERVER Monitoring 3 Af Cache Configuration g Monitoring Configuration F Extensions A A A 14 Network Configuration 4 Client Configuration ti E H 323 Gatekeepers Screenshot 31 ISA Server 2000 Access Policy node 2 Expand the Access Policy node 3 Right click on the Site and Content Rules New Rule This will bring up the New Site and Content Rule Wizard 4 Give the rule the name Block Adult Sites Based on URLs in Adult Destination Set Click on Next to continue 5 In the Rule Action page set the permission to Deny and click on Next to continue 6 In the Rule configuration page select the option Deny access based on destination Click on Next to continue 40 e Common ISA Server Setup Tasks GFI WebMonitor 3 New Site and Content Rule Wizard xi Destination Sets Select the destinations to which this rule applies Apply this rule to Specified destination set bd Name Description lt Back Cancel Screenshot 32 Specify the Destination Set to which this rule applies 7 In the Destination Sets page set the
39. nable Disable Web Traffic Scanning seen 26 GFI WebMonitor 3 Contents e i Configuring supported filetypes to be scanned blocked cccccccessseeeessesteeeseeeees 27 Configuring new filetypes to be scanned blocked ccssccecceesteceesesteeeesssteeeesseaaes 28 Excluding Users IPs from Web Traffic SCANNING sss 29 Excluding websites from Web Traffic processing sssseeees 30 Updating Anti virus Definition Files 30 Keeping the virus scanning engine s up to date eeseesssss 31 Monitoring Internet activity 33 Jepirore Soon MEE 33 Active connections herrena anaa e aad aa adaa eiaa aa insi a adinean aa iiir enn eah 34 URL HBO conres e a inn ER ern aa a Ice eoe e AO 34 Users PISTON EE 36 East WED ACCESS oiin inndata Cip ine tergo oe RULES 37 Common ISA Server Setup Tasks 39 oyirore d oio PPP TT 39 Locating GFI WebMonitor Web Filter 39 Locating GFI WebMonitor Web Filter on ISA Server 2000 39 Locating GFI WebMonitor Web Filter on ISA Server 2004 39 Creating ISA Server access policy rules 40 Creating an Access Rule policy on ISA Server 2000 ssusss 40 Creating an Access Rule policy on ISA Server 2004 sssussss 42 Maintaining the ISA Server Adult Destination URL Sets sss 44 Accessing the
40. ne or more of the anti virus scanning engines to continue using the Web Traffic Scanning feature of GFI WebMonitor NOTE 2 All paid versions of GFI WebMonitor are shipped with a one year anti virus update license 26 Web Traffic Scanning GFI WebMonitor 3 Configuring supported filetypes to be scanned blocked Web Traffic Scanning works on the data objects which are being downloaded When content is downloaded GFI WebMonitor will both extract the advertised Content Type when applicable available as well as determine the real filetype of the downloaded object Using this information GFI WebMonitor will check the Web Traffic Scanning processing engine configuration to see how to process the object GFI WebMonitor ships with the capability to detect a number of filetypes For every filetype you can configure what type of action GFI WebMonitor is to take when processing a downloaded object which matches the indicated filetype Ahttp monitor isa Microsoft Internet Explorer File Edit View Favorites Tools Help A Q x Q x e 75 D Search Sg Favorites 65 el Lx rel 2 Address http JJmonitor isa Go Links Snaglt fy GFI WebMonitor B File Type processing options 8 Monitor Active Connections Configure the GFI WebMonitor file type based access control policy On downloading of a data object GFI ViebMonitor will extract its file type signature and HTTP content type where applicable available This inform
41. node 2 In the configuration section displayed in the right pane specify the required signature file update frequency in hours 3 Click on the Apply button to save your configuration settings NOTE 1 It is recommended to check for anti virus definition files at least once every 24 hours NOTE 2 Web Traffic Scanning for viruses will remain active even during the definition file updating process NOTE 3 GFI WebMonitor will check for anti virus definition updates every time a change is made to the update frequency policy GFI WebMonitor 3 Web Traffic Scanning 31 Monitoring Internet activity Introduction E http monitor isa Microsoft Internet Explorer File Edit View Favorites Tools Help AN 7j Wr ed d o Qs 2 B 75 P Search Se Favorites LA wa UJ LJ dd A Address http monitor isa Go Links Snagit py GFI WebMonitor mmm E Active Connections E URL History E Users History E Last Web Access Monitor Active Connections See which connections are presently passing through the ISA Server Use this monitor to show all active web access connections You can also interrupt undesired connections which are taking up bandwidth ae Configuration Access Permissions amp General Options fe Site Rating A Web Traffic Scanning S BitDefender K Kaspersky URL History See which sites are visited most often Use this monitor to show all web accesse
42. ny details on our website This is important since it allows us to give you support and notify you of important product news Register on http www gfi com pages regfrm htm Advanced GFI WebMonitor deployments The installation and usage of GFI WebMonitor always follows the same paths and procedures Install GFI WebMonitor open Internet Explorer and access the configuration and monitoring interface through the following URL http monitor isa The ISA Server which picks up the request will respond In the case of multiple routed ISA Server installations you need to manually edit a file so that the various GFI WebMonitor download windows will not interfere with each other This is achieved by overwriting the default http monitor isa URL with a dedicated real virtual IP which will clearly identify GFI WebMonitor making the request as well as identify which download window is to process the reply Deploying and using GFI WebMonitor on multiple ISA Servers or ISA Server arrays 1 Install GFl WebMonitor on each of the ISA Server computers that you want to monitor 2 On each GFI WebMonitor deployment use Notepad or an HTML editor to open the DownloadingPage html file located in GFI WebMonitor installation directory Change the address contained in the following variables to a real virtual IP address that is routable via the ISA Server on which you are making the change E g http 130 168 0 1 e ThislSAServerAddress variable whi
43. ocessing eng Users History E Last Web Access S Configuration amp Access Permissions gt General Options Websites excluded from scanning Ge Site Rating gfi com Add excluded website apmmmeemm Bf icrosot com windowsupdate com S BitDefender macromedia com Add Kaspersky V Kaspersky gfisoftware com P E Norman emsisoftcom C General kaspersky labs com a Version Information B Licensing 4 How to Purchase a Done Internet Screenshot 19 Site Rating node Websites excluded from Site Rating You can configure GFI WebMonitor to block data objects downloaded from specific sites to the Web Traffic Scanning processing engine This means that the data objects downloaded by users from the listed websites will not be run against the Web Traffic Scanning action parameters To configure website exceptions 1 Click on the Configuration Web Scanning Traffic node 2 Go to the Exceptions Websites section 3 Specify the URL of the website that will be excluded from the Web Traffic Scanning process and click on the Add button 4 Click on the Apply button to save your configuration settings Updating Anti virus Definition Files New malware in the form of viruses worms spyware Trojans and adware are released hourly To stop new malware from spreading and penetrating into your network you need to ensure that the anti viru
44. olicy on the ISA Server which blocks access to the URLs contained in the Adult Destination URL Set created on the ISA Server by the installation Refer to the Access policy for adult sites on the ISA Server section Access policy for adult sites on the ISA Server To block users from accessing adult rated sites you need to create an access policy rule on your ISA Server which blocks access to the URLs contained in the Adult Destination URL Set When the Site Rating feature is turned on the Site Rating Processing Engine of GFI WebMonitor will add the URLs which contain adult material to the Adult Destination URL Set Follow the procedure described in the topic Creating ISA Server access policy rules contained in the Common ISA Server Setup Tasks chapter to create an access policy rule on your ISA Server which will block all users from accessing the sites listed in the Adult Destination URL Set managed by GFI WebMonitor Entering your license key after installation E http monitor isa Microsoft Internet Explorer File Edit View Favorites Tools Help ay Q es QJ ix 2 v5 pi Search Pg Favorites amp 603 gu LJ id 3S Address amp http monitor isa x Go Link 7 Snaglt 5j GFI WebMonitor Monitor e E Active Connections License key information URL History Users History GFI WebMonitor Product status Licensed version GFI WebMonitor Antivirus updates f
45. on the Refresh button in the upper right of the view to update the information being shown 38 Monitoring Internet activity GFI WebMonitor 3 Common ISA Server Setup Tasks Introduction Use the guides in this section to perform common administrative tasks which may be required on the ISA Server s in your network for optimal integration with GFI WebMonitor Locating GFI WebMonitor Web Filter The GFI WebMonitor Web Filter ISAMON2 dll is an ISAPI Web Filter which installs and plugs into both ISA Server 2000 and ISA Server 2004 Locating GFI WebMonitor Web Filter on ISA Server 2000 1 Launch the ISA Server Management console 2 Expand the Extensions node 3 Click on the Web Filters node ELE ISA Management File Action View Help s AB A Internet Security and Acceleration Serve Priority Order Name Description Version Vendor Relative P Direction ES a and Arrays GMedium 1 GFIWebMon3 Filter GFIWebMonitor3 3 2 GFi Software Ltd ISAMON2 dll Outgoing Web Requests El TMJASON g Monitoring C Computer amp Sf Access Policy f Publishing E Bandwidth Rules Policy Elements Cache Configuration E g Monitoring Configuration Extensions Application Filters pWeb Filters E Network Configuration E Client Configuration igh H 323 Gatekeepers gt Screenshot 29 The GFI WebMonitor web filter listed under Extensions in ISA Server 2000 A list of plug in web fi
46. ontent Types D Application Application Data Files L2 Audio L Compressed Files L Documents D HTML Documents D Images L3 Macro Documents j D Text 13 Video 13 vRML Schedules Screenshot 34 ISA Server 2004 Firewall Policy Node 2 Right click on the Firewall Policy node and select New gt Access Rule This will bring up the New Access Rule Wizard 3 Give the rule the name Block Adult Sites Based on URLs in Adult Destination Set Click on Next to continue 4 In the Rule Action page set the permission to Deny and click on Next to continue New Access Rule Wizard Ei Protocols Select the protocols this rule applies to This rule applies to All outbound traffic m All outbound traffic Selected protocols All outbound traffic except selected lt Back Cancel Screenshot 35 Select the protocols to which this rule applies 5 In the Protocols configuration page select the option All outbound traffic Click on Next to continue 42 e Common ISA Server Setup Tasks GFI WebMonitor 3 Access Rule Sources This rule will apply to traffic originating from the sources specified in this page Add Network Entities x This rule applies to traffic from these sources Network entities xc Anywhere ds Internal New Edit Delete E y Networks External ede eds Local Hi ec Quarantined VPN Clients L VPN Client
47. option to Specified destination set and select the Adult Destination Set from the list provided Click on Next to continue New Site and Content Rule Wizard Es Completing the New Site and Content Rule Wizard You have successfully completed the New Site and Content Rule Wizard Y ou created a rule with the following configuration Name E rule Action Deny Rule Configuration Deny access based on destination Destination set Specified destination set Adult To close this wizard click Finish Screenshot 33 Site and Content Rule Wizard Final dialog showing the configured rule details 8 Click on Finish The new Access Rule policy is now set up on your ISA Server 2000 to block all users from accessing the sites listed in the Adult Destination Set NOTE The adult Destination URL Set was created on the ISA Server during GFI WebMonitor installation GFI WebMonitor 3 Common ISA Server Setup Tasks 41 Creating an Access Rule policy on ISA Server 2004 1 Launch ISA Server 2004 Management console Bg qa VIRTUALSPACES spacedomain com EE Monitoring Firewall Policy Virtual Prival E Configuratio d Network Cache I Add ins _ j General GFIWebMonitor allow LU HTTP lii HTTPS Access Rule Web Server Publishing Rule Secure Web Server Publishing Rule Mail Server Publishing Rule Server Publishing Rule Protocols Users C
48. or licensed engines will expire on 2006 08 22 E Last Web Access 3S Configuration Antivirus engines licensing status Kaspersky Licensed A Permissit SRI BitDefender Licensed S General Options Norman Licensed sf Site Rating 2 Web Traffic Scanning ABE i Kenter new sn here 5 BitDefender License key WW Kaspersky Norman X gt Done Internet Screenshot 4 Viewing license information By default GFI WebMonitor has an unrestricted fully functional evaluation period of 10 days If the data you provided in the download form is correct you will receive by email a license key which enables you to evaluate GFI WebMonitor for 30 days If after the evaluation period you decide to purchase GFI WebMonitor you do not have to re install or reconfigure the product Just enter your new License key in the General gt Licensing node To find out how to buy GFI WebMonitor click on the General How to purchase node NOTE 1 During evaluation you can use the General gt Licensing node to see how many evaluation days are remaining 8 Installing GFI WebMonitor GFI WebMonitor 3 NOTE 2 You must license GFI WebMonitor for the number of computers that will connect to the ISA Server for Access Control and monitoring If you will be installing on multiple ISA Servers you will need a license for each installation NOTE 3 Entering the license key should not be confused with the process of registering your compa
49. ory E Last Web Access Refresh Status GFIMALTANjules 172 16 130 92 602 Receiving x secure voloper net 443 unauthenticated 172 16 130 12 0 DNS resolving and connecting http im chatanywhere net 172 16 130 52 297356506 Receiving X global ds microsoft com 443 S Configuration E Access Permissions My General Options te Site Rating Ak Web Traffic Scanning 25 BitDefender WK Kaspersky Ki CCO Screenshot 22 Active Internet connections unauthenticated ia Internet The Active connections view shows all of the currently active TCP connections which are passing through your ISA Server The information shown includes the username Source IP bytes Received Sent Status as well as details on the URL being accessed You can also use this view to cancel and disconnect an active Internet connection e g You can interrupt a big file download which will take up too much bandwidth To interrupt a connection click on the I button included in the Status column of the connection to be interrupted NOTE The information displayed is not automatically refreshed Click on the Refresh button in the upper right of the view to update the information being shown URL History http monitor isa Microsoft Internet Explorer File Edit View Favorites Tools Help Qu O x 2 75 j search Sg Favorites ORZ ke ww LJ amp 4 23 ddess E htpilmontoriss OSS e GFI WebMonitor 8 Monitor
50. owledgebase which includes answers to most common problems If you have a problem please consult the knowledgebase first The knowledgebase always has the most up to date listing of support questions and patches The knowledgebase can be found on http kbase gfi com Web Forum User to user support is available via the web forum The forum can be found at http forums gfi com Build notifications We strongly suggest that you subscribe to our build notifications list This way you will be immediately notified about new product builds To subscribe to our build notifications go to http support gfi com GFI WebMonitor 3 Troubleshooting 47 Index A Access Permissions 6 12 13 15 16 access policy rules 8 40 Active connections 33 34 Alerting Options 18 anti virus definition files 18 30 31 C Configuration 1 content filtering 2 3 D Data Retention Options 17 Destination URL Set 3 8 21 22 23 24 41 44 E Exceptions 23 24 29 30 F Filetype signatures 2 4 file types 27 28 G General Options 7 15 17 18 26 ISA Server arrays 9 L Last Web Access 17 33 37 38 P plug in web filters 39 40 S Site Rating 2 3 8 15 21 22 23 24 30 System requirements 5 T Troubleshooting 47 U URL history 1 34 GFI WebMonitor 3 Troubleshooting 49 URL History 17 18 33 34 36 User history 1 Users History 33 36 37 V virus scanning engines 2 4 25 Ww Web Traffic
51. ptions 1 Exit GFl WebMonitor interface 2 Open the file named WebMonCfg TXT in GFI WebMonitor installation directory 3 Add the following entry in the Notifications area of the WebMonCfg TXT file SendNotificationWhenUpdated 1 4 Save and close the file 5 Restart the ISA Server Web Proxy Server W3PROXY from the Service Control Manager Start Settings Control Panel gt Administrative Tools gt Services 18 o Configuring GFI WebMonitor GFI WebMonitor 3 E webMonCfg TXT Notepad De Edt Format yew help owed IPs 127 0 0 1 172 16 130 131 169 254 249 94 anualReeritingGuidesTo apply changes you must restart ISA Services Every specified IP should start with and be followed by a character IPs can contain IP and or user login name category SNeEvaluation tions AdminEmailAddresssAdministrator 127 0 0 1 ISMTPServer 127 0 0 1 insert the following Entry in hera SMTPPort 25 SendNotificationWhenUpdated 1 a lrFromAddresse rsAwebMonitor 127 0 0 1 Screenshot 11 Editing the WebMonCfg TXT file NOTE To revert back to the default notification settings i e send notifications only on failed virus signature updates repeat the same process but this time remove the entry SendNotificationWhenUpdated 1 GFI WebMonitor 3 Configuring GFI WebMonitor e 19 Site Rating Introduction Use GFI WebMonitor Site Rating feature together with the ISA Server web access blocking capabilities to
52. r 11 Jejirore i ool MEME 11 Troubleshooting GFI WebMonitor access troubles 11 Configuring Internet Explorer to use the ISA Server as its DIOXV EE tea iris end uui oo REE EE e SOR LEN Led aungeea aden cdedi qanun daa M Deua exe TRE ee vega 12 Giving the computer access permissions to access GFI Vu selves cl REN 12 Giving a user account access permissions to access GFI WebMIODITOE ah estie a a heepuotit tentatus ti ois erbe iof ees 12 Access Denied Authenticated user esses 12 Access Denied Non Authenticated user essen 13 Configuring GFI WebMonitor 15 Riolo Lelei oTa contours dert ee e cc d MEE 15 ACCESS Permissions dedere aet hsc tnde ess uote baee estet oeil eoo 16 General Optloris 55 5 sot rt tasto ca aaah actos atags tese rit suas DNTS 17 Data Retention Options sssssssssesseeeeee ener nnne 17 Alerting Options iei ee e Oe ER eio en Rae ela eee aaan 18 Extended Alerting Options sse 18 Site Rating 21 eligoye N os oa RM CH ELA TEE 21 Enabling Disabling Site Rating 22 Excluding Users IPs from Site Rating ssssssseeeenne 23 Excluding websites from Site Rating essen 24 Viewing the contents of the Adult Destination URL Set on ISA SOIVOl Aui dendi adito te dese i da ease daa oe yq dang TIRES YA caa SEPAN e OTT E eA tia Lei IU R dA 24 Web Traffic Scanning 25 INKO dU fog Beeren RC TET T 25 E
53. ral options page For monitoring and reporting GFI WebMonitor collects and retains data related to web requests in memory Unless the history data is reset it can grow to a level which will affect the performance of GFI WebMonitor In GFI WebMonitor you can reset the collected data in two ways e Automatically GFI WebMonitor will automatically reset the collected data daily at midnight e Manually You must reset the collected data by pressing a reset data button from GFI WebMonitor interface You can reset the Internet activity data history whenever required by clicking on the Reset button included at the top of the monitoring reports accessible through the Monitor node i e Monitor URL History Monitor User History and the Monitor Last Web Access nodes To configure the data retention policy of GFl WebMonitor 1 Click on the Configuration General Options node 2 Go to the Data Retention Options section 3 Select one of the following options e will reset the Connection data history list manually Select this option to manually reset the history data cache GFI WebMonitor 3 Configuring GFI WebMonitor e 17 NOTE It is recommended that the collected data is cleared at least once a week e Automatically reset the Connection data history list every day at midnight Select this option to let GFI WebMonitor automatically reset the history data cache daily at midnight 4 Click on the Apply button
54. rmation to personalize your installation Full Name Nick Galea Organization ari Software Ltd License Key E valuation GFI w ebMonitor Screenshot 2 Entering User Information 7 Specify the full username the company name and the license key If you are evaluating the product leave the evaluation key as default i e Evaluation Click on Next to continue ie GFI WebMonitor for ISA Server Setup 0 x1 Mail Settings uw T Enter administrator email and SMTP mail server settings 44 Please enter the details of the SMTP Server and the email address that are to be used by GFI w ebMonitor 3 for email notification From IS amp webM onitor127 0 0 1 To Administrator 1 27 0 0 1 SMTP server 127 0 0 1 Port 25 Verify Mail Settings GFI WebMonitor Qn HM Cancel lt Back Screenshot 3 Entering email notification details 8 Specify the SMTP mail server details Hostname IP and Port as well as the recipient where email notifications on important events will be sent Click on Next to continue NOTE After installation you can change these settings from the Configuration General Options node GFI WebMonitor 3 Installing GFI WebMonitor 7 9 Specify the installation path for GFI WebMonitor and click on Next to continue 10 Click on Next to finalize the installation NOTE If you will be using the Site Rating features of GFI WebMonitor you will need to create a user access p
55. ror message 192 168 0 3 Access to GFI WebMonitor for ISA Server was DENIED Description Access to GFI WebMonitor is allowed based on IP or ISA authenticated user name You can configure which users or IF s have access to GFI WebMonitor from htto monitor isa authenticated as allowed user or connecting from allowed IP address or directly editing WebMonCfg bd in ISA main directory Please consult your administrator Screenshot 7 Access Denied Non Authenticated user On a computer with access to GFI WebMonitor interface 1 Launch GFI WebMonitor configuration interface 2 Click on the Configuration Access Permissions node 3 Specify the IP e g 192 168 0 3 of the computer from which requests to access GFI WebMonitor will be allowed and click on the Add button 4 Click on Apply to save the updated configuration settings GFI WebMonitor 3 Accessing GFI WebMonitor e 13 Configuring GFI WebMonitor Introduction 3 http monitor isa Microsoft Internet Explorer File Edit View Favorites Tools Help ay Q ese Q ix ia v Search Se Favorites fA 62 eu LJ rel A Address http monitor isa Ee Links Snagit s GFI WebMonitor 8 Monitor P E Active Connections Configuration Bd URL History Users History E Last Web Access E iconfauraton fal Access Permissions S General Options si Site Rating A Web Traffic Scanning 2 BitDefender K Kaspersky D Norman G2 General Ace
56. rus scanning engines Internet WebMonitor Service 4 Checks for viruses using the supported virus scanning engines 5 Checks for spyware and adware using the supported virus scanning engines 6 Checks for Trojans using the supported virus scanning engines To configure the Web Traffic Scanning options go to Configuration Web Traffic Scanning node Options which can be configured include e Enable Disable in its entirety the Web Traffic Scanning engine e Enable Disable virus scanning engine s used to scan downloaded data objects for malware e Configuration of which data objects are to be allowed blocked and scanned for malware through the selected anti virus engine s Web Traffic Scanning e 25 e Configuration of user exceptions data objects downloaded by these users will not be passed through the Web Traffic Scanning processing engine e Configuration of website exceptions data objects downloaded from these sites will not be allowed through the Web Traffic Scanning processing engine Enable Disable Web Traffic Scanning E http monitor isa Microsoft Internet Explorer File Edit View Favorites Tools Help ay Qs 2 ix BE A Search Se Favorites 2 2 a i rel A Address http monitor isa bd go Links Snagit 5j GFI WebMonitor E Monitor Web Traffic Scanning E Active Connections E URL History Configure which downloaded content types will be blocked allowed or scanned for E U
57. s 3 Network Sets Ca Computers E Address Ranges d Subnets amp d Computer Sets lt Back Next gt dd Close Screenshot 36 Select the traffic sources to which this rule applies 6 In the Access Rule Sources configuration page click on Add Expand the Networks node and select Internal Click on Add followed by Close Click on Next to continue x Access Rule Destinations This rule will apply to traffic sent from the rule sources to the destinations specified in this page 3 J NELT Add Network Entities This rule applies to traffic sent to these destinations F3 Network entities Mew Edit Delete gi Networks 9 Network Sets 9 Computers E Address Ranges d subnets Lj Domain Name Sets E E URL Sets ES if ts WebMe iiitor update servers 9 Computer Sets aee Screenshot 37 Specify the Destination Set to which this rule applies 7 In the Access Rule Destinations page click on Add Expand the URL Sets node and select the Adult Destination Set Click on Add followed by Close Click on Next to continue 8 In the User Sets page click on Next to continue the required parameter is already set by default to All Users GFI WebMonitor 3 Common ISA Server Setup Tasks e 43 New Access Rule Wizard fed Completing the New Access Rule paces Wizard internet Security amp You have successfully completed the New Access Rule Acceleration 2004 Wizard T
58. s e URL History view shows all visited websites e User History view shows all sites visited by each user e All views show the number of bytes transferred sent received e Native integration with ISA Server as a web filter e Web based interface allows viewing from anywhere in the network e Supports Microsoft ISA Server 2000 2004 both Standard and Enterprise Editions e Easy installation minimal configuration required GFI WebMonitor 3 Introduction e 1 e Does not duplicate functionality already present in MS ISA Server e Site Rating Proactive assisted real time content filtering GFI WebMonitor checks URLs for adult content through the Yahoo SafeSearch categorization engine Yahoo SafeSearch is an online database which classifies and categorizes various sites on the Internet GFI WebMonitor queries this database to detect sites with adult content With GFI WebMonitor and Yahoo SafeSearch database querying your administrative overhead to keep your web filters up to date with new adult sites opened is obsolete e Web Traffic Scanning Scanning downloaded content via HTTP and FTP for viruses using one or more virus scanning engines GFI WebMonitor supports three virus scanning engines BitDefender Kaspersky and Norman e Real filetype signature check GFI WebMonitor performs real filetype signature checks on all HTTP FTP files being downloaded Filetype signatures are a short series of bytes that define t
59. s definition files are up to date with the latest definition files released by the respective vendors GFI WebMonitor periodically checks and downloads new anti virus definition files made available for the supported virus scanning engine s 30 Web Traffic Scanning GFI WebMonitor 3 http monitor isa Microsoft Internet Explorer File Edit ad 2 Q Q i3 id 9 se deem OO a LE E Address http J monitor isa bd SE Links Snagit r GFI WebMonitor 88 Monitor LE Active Connections URL History E Users History E Last Web Access View Favorites Tools Help BitDefender configuration Status Active AVCORE v1 0 build 2292 i386 Mar 3 2005 11 57 29 Signatures 2317 Update virus database every 6 hours Updated Next update check 10 31 12 54 as Configuration al Access Permissions hj General Options she Site Rating A Web Traffic Scanning e pumemm K Kaspersky D Norman kp amp Done Screenshot 20 Configuring the virus update frequency If a virus is found the web request will be blocked and the file deleted Fs Internet Keeping the virus scanning engine s up to date To view the properties of supported virus scanning engines as well as configure the update frequency policy of the respective signature files 1 Select the scanning engine to be configured e g BitDefender from the list provided under the Configuration Web Traffic Scanning
60. s Tools Help a Ou O AG lao drm Os I A Address Je http monitor isa GFI WebMonitor Eco uns gt Snagit Ls E z d Monitor Access Permissions I Active Connections URL History Configure who can access the GFI WebMonitor web interface for configuration and monitoring Users History E Last Web Access B GFI WebMonitor Access Permissions d Configuration Specify who will be able to access the GFI WebMonitor web interface By default only connections originating from the ISA a Access Permissions Server computer will be authorized to access the GFI WebMonitor configuration and monitoring interface S General Options Pe Site Rating Authorized computers users A Web Traffic Scanning Add allowed IP or User 49 BitDefender We Kaspersky E Norman 2 General Version Information B Licensing 4 How to Purchase e Support Center NOTE Specify computers with their fixed IPs and or user name s according to the way ISA server authenticates the user 4B GFI WebMonitor vend DOMAINiusername format You can find out the authentication format used from User column in Monitor gt User GFI LANguard N 5 5 X E x Done Internet Add Screenshot 9 Security node Access Permissions list Access to GFI WebMonitor is based on the IP or windows authenticated username which are being used by the user attempting to gain access to the configuration Only users computers which are in th
61. s done grouped by URL in descending order of popularity Users History See which sites users have been accessing Use this monitor to show a list of all the network users and the URLs that they have accessed D Norman Last Web Access 2 General See the last 200 URLs accessed through the ISA Server 4 2 Done Internet Screenshot 21 The Monitor node Use the GFI Monitor nodes and sub nodes to access different views of the web requests both active and past which passed through the ISA Server To get a view of the data which is constantly collected by GFI WebMonitor reflecting the data going through the ISA Server click on any of sub nodes listed under the Monitor node These include e Active connections sub node e URL History sub node e Users History sub node e Last Web Access sub node GFI WebMonitor 3 Monitoring Internet activity 33 Active connections E http monitor isa Microsoft Internet Explorer File Edit view Favorites Tools Help Q ex hM c ix E A Search Se Favorites gA wwe e lcs Fel 33 Address http monitor isa z o uns Q sna psy GFI WebMonitor 38 Monitor Active Connections URL History See which connections are presently passing through the ISA Server Use this monitor to show all active web access connections You can also interrupt undesired connections which are taking up bandwidth E Users Hist
62. ser name or the computer IP which will be granted access to GFI WebM 127 0 0 1172 16 130 131 169 254 249 94 172 16 130 131 192 168 3 12 NOTE Specify user name s in the format DOMAIN username NOTE The IP of this computer is already added to the access permission list NOTE You can specify more than one user computer Separate entries with a semicolon e g 127 0 01 COMPANY userl COMPANY S user2 1 72 16 135 16 GFI WebMonitot cece Cancel Screenshot 1 Configuring access at installation 6 Specify the username s or IP address of the computer s that will be allowed to use and configure GFI WebMonitor You can specify multiple IPs or usernames by separating them with e g 209 217 53 213 66 172 16 32 JasonM NOTE 1 Only the IPs Users specified in this dialog will have access locally or remotely to GFI WebMonitor interface NOTE 2 After installation you can configure GFI WebMonitor to authorize other users to access GFI WebMonitor interface from the Configuration Access Permissions node For more information on how to configure user access permissions refer to the Accessing GFI WebMonitor chapter NOTE 3 By default only the administrator on the ISA Server machine will have access to GFI WebMonitor configuration 6 Installing GFI WebMonitor GFI WebMonitor 3 ie GFI WebMonitor for ISA Server Setup 0 x MLD 5 AM User Information Enter the following info
63. sers History viruses and malware through the BitDefender Kaspersky virus engines E Last Web Access Web Traffic Scanning General Options as Configuration P 3 GFI WebMonitor performs Web Traffic Scanning on the data objects passing to the ISA Se E ced cria real file type as well as HTTP content type Specify whether GFI VYebMonitor is to perform 4 General Options control on the data passing through the ISA Server she Site Rating X PENEI M Enable Web Traffic Scanning Web Traffic scanning us BitDefender Select one or more antivirus engines to scan data objects with K Kaspersky v BitDefender Anti Virus i Norman IV FA kaspersky Anti Virus G2 General V El Norman Anti Virus Version Information amp Licensing Apply 4B How to Purchase a iat we amp Internet Screenshot 15 Virus Scanning Engines node Engine options To enable Web Traffic Scanning 1 Click on the Configuration Web Traffic Scanning node 2 Go to the Web Traffic Scanning General Options section 3 Select the Enable Web Traffic Scanning option 4 Select one or more anti virus engine s to scan data objects for malware The anti virus engines supported include e Kaspersky e BitDefender e Norman 5 Click on the Apply button to save your configuration settings NOTE 1 During evaluation all supported anti virus engines can be configured and used On evaluation expiration you will need to purchase a license key which will enable o
64. ss Permissions Configure who can access the GFI VebMonitor web interface for configuration and monitoring General Options Configure the data retention policy as well as alerting options for email notifications on important events Site Rating Configure automatic web site rating and access control policy Web Traffic Scanning Configure which downloaded content types will be blocked allowed or scanned for viruses and malware through the BitDefender Kaspersky virus engines 4 Internet Screenshot 8 The Configuration node The GFI WebMonitor interface allows you to configure all of the functional parameters required for web traffic monitoring processing and scanning These parameters are setup through the four sub nodes contained within the Configuration node which are e Access Permissions Configure who can access GFI WebMonitor web interface for configuration and monitoring e General Options Configure the data retention policy as well as alerting options for email notifications on important events e Site Rating Configure automatic Site Rating and Access Control policy e Web Traffic Scanning Configure content checking and anti virus parameters to use for monitoring and scanning of downloaded files and Internet objects GFI WebMonitor 3 Configuring GFI WebMonitor e 15 Access Permissions 16 e Configuring GFI WebMonitor E http monitor isa Microsoft Internet Explorer Ele Edit View Favorite
65. t Ey Secure Download Downloaded http www eere energy gov consumerinfo pdfs eewindows pdf Downloading file suctess Size 233 KB Scanning with BitDefender success 2005 09 22 10 15 Scanning with Kaspersky success 2005 09 22 13 03 Result Back Save to disk ap Internet Screenshot 17 AV Scan Show Progress to User real time download feedback in status window 4 Click on the Apply button to save your configuration settings NOTE 1 When using the action option Scan Show Progress to User GFI WebMonitor will show in real time on the client web browser the status of the download in progress on a web page equivalent of the download status When the download completes client users can save the downloaded object to disk by using the Save to disk button on the download web page This process requires the manual intervention of the user in order to save the downloaded object NOTE 2 The action option Scan Show Progress to User can interfere with auto update sites like windows update Be sure to add the site which is being contacted for auto updates to the Exclusion list described further on in this chapter Configuring new filetypes to be scanned blocked GFI WebMonitor ships with the capability to detect a set of data object types To configure Web Traffic Scanning action support for objects whose HTTP Content Types are advertised in the HTTP code To configure the Web Traffi
66. t site as well as a graphical representation of the URL s hits over time a http monitor i isa Microsoft Internet Explorer Hile Edit View Favorites Tools te GFI WebMonitor a Monitor URL Domain part 54 130 130 10 E Active Connections thts aoe web Feud c IMMER me C its over time ame 130 16 130 12 44013 ofimalta hera E Users History Users 186 aofimalta viking 113 gfimalta kiksne 176 E Last Web Access 3B Configuration Access Permissions General Options Screenshot 25 URL detailed information view GFI WebMonitor 3 Monitoring Internet activity 35 This graphical representation helps you to identify the time slice s during which this site is most frequently accessed daily oased on 24 hrs To reset the data collected by GFI WebMonitor click on the Reset Data button at the top of the URL History view Deleted data cannot be recovered undone NOTE The information displayed is not automatically refreshed Click on the Refresh button in the upper right of the view to update the information being shown File Edit View Favorites Tools En Qe p ig t vl Search Sg Favorites GFI WebMonitor 38 Monitor Active Connections URL History Users History Last Web Access Users History See which sites users have been accessing Use this monitor to show a list of all the network users and the URLs that they have

"user manual"

Contents

Download Pdf Manuals

Related Search

Related Contents

&quot;user manual&quot;

Contents

Download Pdf Manuals

Related Search

Related Contents

"user manual"