Lancom 61595 manual

110756/0510 LANCOM Systems GmbH Adenauerstr . 20/B2 52146 Würselen Germany E-Mail: info@lancom.eu Internet www .lancom.eu LANCOM Content Filter Option LANCOM Content Filter Option 쮿 Handbuch 쮿 Manual ...co nnecti ng you r bus iness 110756_LC-OPTION-ContentFilter.i1 1 110756_LC-OPTION-ContentFilter.i1 1 06.05.2010 08:10:33 06.05.2010 08:10:33[...]

LANCOM Content- Filter[...]

© 2010 LANCOM Systems GmbH, Wuersele n (Germany). All rights r eserved. While the informat ion in this manual has been compiled wit h great care , it may not be deemed an assurance of pr oduct characteristics. LANCOM System s shal l be liable onl y to the degre e specified in the t erms of sale and del ivery . The repr oduction and distribution of[...]

LANCOM Content- Filter  Preface 3 EN Preface Thank you for your confidence in us! The LANCOM Content - Filter acts to fil t er out Internet websites with undesir - able content. It enables you to allow or forbid access to certain website pages and to carry out checks on the content of an online server according t o pre - defined categories.  [...]

LANCOM Content- Filter  Preface 4 EN and contact addresses for LANCOM Support, please refer to the enclosed leaflet or the LA NCOM Systems W eb site. Information symbols  Very important instr uctions. Failure to ob serve these may result in d amage.  Important i nstruction that should be observed.  Additiona l informat ion that m ay be [...]

LANCOM Content- Filter  Contents 1 EN Contents 1 Activating the LANCOM Content- Filter Option 3 1.1 Prerequisites for install ation 3 1.1.1 Sys tem requirement s 3 1.1.2 Package content 3 1.1.3 Confi guration computer with the Windows operating system 3 1.1.4 Up- to- date LANc onfig 4 1.1.5 Up- to- date firmware in the LANCOM 4 1.2 Online regist[...]

LANCOM Content- Filter  Contents 2 EN 3 Advanced configuration of the LAN COM Content Filter with LANconfig 14 3.1 General settings 14 3.2 Settings for blocking 17 3.2.1 Blo ck- Text 18 3.2.2 Error- T ext 20 3.3 Override settings 21 3.3.1 Override te xt 23 3.4 Profiles in the LANCOM Content Fi lter 25 3.4.1 Profil es 25 3.4.2 Blacklist addresse [...]

LANCOM Content- Filter  Chapter 1: Activating the L A NCOM Content - Filter Option 3 EN 1 Activating the LANCOM Content- Filter Option This brief chapter informs you how to activate the LANCOM Content- Filter Option on your LANCOM. A ctivation takes place in four steps: 햲 Ensuring that the pr erequisites for installatio n are fulfille d 햳 On[...]

LANCOM Content- Filter  Chapter 1: Activating the L ANCOM Content - Filter Option 4 EN T he co m pu t er mu s t ha ve a cc e ss to t he LA NC O M d ev ic e th at i s t o b e c on f ig - ured. A ccess may be via the LAN or via remote access . 1.1.4 Up- to- date LANconfig The latest version of LANconfig and LA Nmonitor are available for download f[...]

LANCOM Content- Filter  Chapter 1: Activating the L A NCOM Content - Filter Option 5 EN  The license number (from the proof of license)  Serial number of your LANCOM (to be found on the underside of the device)  Y our customer data (company , name, postal address, e- mail address).  Registration is anonymous and can be completed with[...]

LANCOM Content- Filter  Chapter 1: Activating the L ANCOM Content - Filter Option 6 EN  When using the command line interface (e.g. T elnet), enter the command feature followed by the activation key: Feature <activation key>  Please be aware that ac tivating the LANCOM Content- Filter Option is valid only for a certain time period. Y[...]

LANCOM Content- Filter  Chapter 1: Activating the L A NCOM Content - Filter Option 7 EN If activation was succe ssful, you can co ntinue by configuring the L ANCOM Content- Filter.[...]

LANCOM Content Filter  Chapter 2: Configuring the LANCOM Content Filter 8 EN 2 Configuring the LANCOM Content Filter 2.1 Introduction The LANCOM Content Filt er enables you to filter certain conte nt from your network, so preventing access to Internet pages with content that is illegal , dangerous or offensive. It also enables you to stop privat[...]

LANCOM Content Filter  Chapter 2: Configuring the L ANCOM Content Filter 9 EN All settings r e lating to categori es are stor ed in category profiles. Y ou select from pr edefined main and sub- categories in the LANCOM Content Fil ter: 58 categories are divided into 14 subject groups such as “Pornography , Nudit y", "Shopping" o[...]

LANCOM Content Filter  Chapter 2: Configuring the LANCOM Content Filter 10 EN 2.2 Requirements for using the LANCOM Content Fil ter The following re quirement s must be met before you can use the LANCOM Content Filte r: 쐃 The firewall must be activated and an appropriate fir ewall rule must select the content filter profile. 쐇 The content fi[...]

LANCOM Content Filter  Chapter 2: Configuring the L ANCOM Content Filter 11 EN 쐋 Select one of the pre- defined securi ty profiles (basic, work, parental control):  Basic: This profile ma inly blocks ac cess to the categorie s pornography , illegal, violent or discrim inatory content, drugs, SP AM and phishing  Work: In addition to the s[...]

LANCOM Content Filter  Chapter 2: Configuring the LANCOM Content Filter 12 EN  A whitelis t  Three category pr ofiles Firewall rule The preset firewall rule is named CON TENT - FIL TER and us es the action object CONTENT - FIL TER- BASIC.  The fir ewall rule is not created au tomatically if the LANCOM Content Filter is installed on a de[...]

LANCOM Content Filter  Chapter 2: Configuring the L ANCOM Content Filter 13 EN  AL WA YS: 00.00- 23.59 hrs  NEVER: 00.00- 0.00 hrs Blacklist The preset blacklist is named "MY - BLACKL I ST " a nd i t is e m p ty . H er e yo u c a n optionally enter URLs which are to be forbidden. Whitelist The preset whitelis t is named " MY[...]

LANCOM Content Filter  Chapter 3: Advanced configuration of th e L ANCOM Conten t Filter with LANconfig 14 EN 3 Advanced configuration of the LANCOM Content Filter with LANconfig The program LANconfig contains a spec ial menu to configur e the content filter .  The operation of the LANCOM Content Filter may be r estricted by your country&apos[...]

LANCOM Content Filter  Chapter 3: Advanced configuration of th e L ANCOM Content Filter with L ANconfig 15 EN LANconfig: Content- Filter  General WEBconfig: L COS menu tr ee  Setup  UTM  Content- Filter  Global- Settings  Operating This is where y ou can activate the LANCOM Content Filter .  Action- on- Error: This is where [...]

LANCOM Content Filter  Chapter 3: Advanced configuration of th e L ANCOM Conten t Filter with LANconfig 16 EN Default:  Block  The users of the content filter ar e automatically r emoved fr om the user list when no connection has be en made from the IP addr ess concerned via the content filter for 24 hours.  Action- on- License- Expir a[...]

LANCOM Content Filter  Chapter 3: Advanced configuration of th e L ANCOM Content Filter with L ANconfig 17 EN  3000 milliseconds Special values:  The value 0 m eans unlimited timeout. Values smaller tha n 100 mill i- seconds are not r easonable. 3.2 Settings for blocking Y ou adjust the website- blocking settings here : LANconfig: Content-[...]

LANCOM Content Filter  Chapter 3: Advanced configuration of th e L ANCOM Conten t Filter with LANconfig 18 EN  Alt. source IP for block URL: This is wher e you can configur e an optional sender addr ess to be used instead of the one that would normally be automatically selected for this target addr ess. If you have config ured loopbac k addre[...]

LANCOM Content Filter  Chapter 3: Advanced configuration of th e L ANCOM Content Filter with L ANconfig 19 EN Examples of the country code:  d e -D E : G e r m a n -G e r m a n y  d e -C H : G e r m a n -S w i t z e r l a n d  d e -A T : G e r m a n -A u s t r i a  en- GB: English- Great Britain  en- US: English- USA  The count[...]

LANCOM Content Filter  Chapter 3: Advanced configuration of th e L ANCOM Conten t Filter with LANconfig 20 EN  <CF- LINK/> adds a link fo r activating the override  <CF- BUTT ON/> for a button for activati ng the override Y ou can use a tag with attribut es to displ ay or hide parts of the HTML document: <CF- IF att1 att2>[...]

LANCOM Content Filter  Chapter 3: Advanced configuration of th e L ANCOM Content Filter with L ANconfig 21 EN  Language This item offers the same setting s as described under ’Language’ → Pa g e 18 a b o v e .  Te x t Enter the text that you wis h to use as err or text for this language. Possi ble values:  254 alphanumeric al char[...]

LANCOM Content Filter  Chapter 3: Advanced configuration of th e L ANCOM Conten t Filter with LANconfig 22 EN LANconfig: Content- Filter  Override WEBconfig: L COS menu tr ee  Setup  UTM  Content- Filter  Global- Settings  Override- Active This is where you can activate the override function and make further related settings. ?[...]

LANCOM Content Filter  Chapter 3: Advanced configuration of th e L ANCOM Content Filter with L ANconfig 23 EN  Category: For the dura tion of the ov erride, all URLs are allowed that fall under the affect ed categories (as well as those which would already have been al lowed even without the override).  D o ma in : F or t he du r at i o n [...]

LANCOM Content Filter  Chapter 3: Advanced configuration of th e L ANCOM Conten t Filter with LANconfig 24 EN  Language This item offers the same setting s as described under ’Language’ → Pa g e 18 a b o v e .  Te x t Enter the text that you wis h to use as override text for this language. Possi ble values:  254 alphanumeric al ch[...]

LANCOM Content Filter  Chapter 3: Advanced configuration of th e L ANCOM Content Filter with L ANconfig 25 EN  BOTH when the override type is "Category- and - Domain" and the override was successful  ERROR when the override fails  OK if either CA TEGORY or DOMAIN or BOTH ar e applicable If several attributes are defined in on [...]

LANCOM Content Filter  Chapter 3: Advanced configuration of th e L ANCOM Conten t Filter with LANconfig 26 EN LANconfig: Content- Filter  Profiles  Profiles WEBconfig: L COS menu tr ee  Setup  UTM  Content- Filter  Profiles  Profiles  Name The profil e name that the fi rewall refer ences must be specified her e. Possi ble[...]

LANCOM Content Filter  Chapter 3: Advanced configuration of th e L ANCOM Content Filter with L ANconfig 27 EN  If timeframes overlap when multiple entries are used for a content filter profile, all pages contained in one of the active entrie s will be blocked for that period of time. If a period remains undefined when several entries are used[...]

LANCOM Content Filter  Chapter 3: Advanced configuration of th e L ANCOM Conten t Filter with LANconfig 28 EN 3.4.2 Blacklist addresses (URL) This is where you can configure websites which are to be blocked. LANconfig: Content- Filter  Profiles  Blacklist addresses (URL) WEBconfig: L COS menu tr ee  Setup  UTM  Content- Filter [...]

LANCOM Content Filter  Chapter 3: Advanced configuration of th e L ANCOM Content Filter with L ANconfig 29 EN suffix to the URL, e.g. www .mycompany .de/ . For this reason it i s advisable to enter the URL as: www .mycompany .de* . Individual URLs are separ ated by a blank. Default:  Blank 3.4.3 Whitelist addresses (URL) This is where you can[...]

LANCOM Content Filter  Chapter 3: Advanced configuration of th e L ANCOM Conten t Filter with LANconfig 30 EN  * for any combination of more than one char acter (e.g. www .lancom.* encompasses the websites www .lancom.de , www .lancom.eu, www .lancom.es , etc.)  ? * for any one character (e.g. www .lancom.e* encompasses the websites www.la[...]

LANCOM Content Filter  Chapter 3: Advanced configuration of th e L ANCOM Content Filter with L ANconfig 31 EN  Category profile The name of the category profile for referencing fr om the content- filter profile is entered here. Possi ble values:  Name of a category profile Default:  Blank  Category settings For each main cat egory an[...]

LANCOM Content Filter  Chapter 3: Advanced configuration of th e L ANCOM Conten t Filter with LANconfig 32 EN The category profile must subsequently be assigned to a content- filter profile (together with a timeframe) to become active. Possi ble values:  Allowed, forbidden, override Default:  Allowed 3.5 Options with the LA NCOM Content Fi[...]

LANCOM Content Filter  Chapter 3: Advanced configuration of th e L ANCOM Content Filter with L ANconfig 33 EN LANconfig: Content- Filter  Options WEBconfig: L COS menu tr ee  Setup  UTM  Content- Filter  Global- Settings  Events: This is where you define how you wish to receive notification of specific events. Notification can [...]

LANCOM Content Filter  Chapter 3: Advanced configuration of th e L ANCOM Conten t Filter with LANconfig 34 EN  For SYSL OG: Source “ Admin”, priority “Info”.  Default: SNMP notification  E- mail recipient: An SMTP cli ent must be defi ned if you wish to us e the e- mail noti fication function. Y ou can use the client in th e dev[...]

LANCOM Content Filter  Chapter 3: Advanced configuration of th e L ANCOM Content Filter with L ANconfig 35 EN  Day of month: For monthly snapshots, set the day of the month when the snapshot should be taken. Possi ble values:  Max. 2 characters Default:  1  It is advisabl e to select a number between 1 and 28 in or der to ensure that[...]

LANCOM Content Filter  Chapter 3: Advanced configuration of th e L ANCOM Conten t Filter with LANconfig 36 EN  The firewall rule should be limited to the target service “http” so that only outgoing HT TP connections are examined. Without this restriction all packets will be checked by the content filter , which could lead to a loss of sy [...]

LANCOM Content Filter  Chapter 3: Advanced configuration of th e L ANCOM Content Filter with L ANconfig 37 EN Example: When a web page is accessed , the data packets pass through the firewall and are pr ocessed by the rule CONTENT - FIL TER. The action object CONTENT - FIL TER- BASIC checks the data packets using the content- filter profile CONT[...]

LANCOM Content Filter  Chapter 3: Advanced configuration of th e L ANCOM Conten t Filter with LANconfig 38 EN  Stop time Here you set the stop time (time of day) when the selected p rofile ceases to be valid. Possi ble values:  Maximum 5 characters, format HH:MM Default:  23:59  Week day s Here you select the weekday on which the ti [...]

LANCOM Content Filter  Chapter 4: Stat us messages 39 EN 4 Status messages 4.1 LANmonitor LANmonitor allows you to see the most important status messages from the LANCOM Content Filter at a glance. 4.1.1 Information displayed by LA NCOM Content Filter in summary LANmonitor shows the the following information about the LANCOM Content Filter:  [...]

LANCOM Content Filter  Chapter 4: Status messages 40 EN  Maximum processing time: Maximum time taken to process a URL, assuming this is less than the timeout value.  Average processing time: A verage time taken to process a URL.  Average processing time (last 5 min.): The average time taken to process a URL in the last 5 minutes.  Re[...]

LANCOM Content Filter  Chapter 4: Stat us messages 41 EN Displaying content filter category statistics T h i s d i a l o g d i s p l a y s t h e l i s t o f a l l c a t e g o r i e s w i t h t h e n u m b e r o f b l o c k e d accesses to the co ntent filter and th e share of all accesses in percent. Y ou can use the Content- Filter categories m[...]

LANCOM Content Filter  Chapter 4: Status messages 42 EN 4.1.3 Functions in LANmonitor Additional functions are available for you to influence the LANmonitor display:  Click with the right- hand mouse button on the URL counter entry in LANmonitor and select Reset URL counter to reset the values for t his particular area to zer o.  Click on [...]

LANCOM Content Filter  Chapter 4: Stat us messages 43 EN  Whitelisted- URLs Displays the number of websites a ccessed that are on the whitelist.  Cache- Flush This option allows you to dele te (flush) the cache and all T op- 10 lists. The Cache- Current- Size is reset to 0 while the Cache- Maximum- Size remains unchanged.  Category- Sta[...]

LANCOM Content Filter  Chapter 4: Status messages 44 EN Content Filt er’ → Pa g e 32 ). The snapshot copies the category statistics tabl e to the last last snapshot table, overwriting t he contents of the last snapshot table. The category statis tics values are then r eset to 0.  Category Name of the category in quest ion.  Hits Number[...]

LANCOM Content Filter  Chapter 4: Stat us messages 45 EN  User- MAC Indicates the MA C address of the us er who performed the override.  Ta r g e t U R L Indicates the website for which the override was performed. 4.2.6 Cache  Cache- Current- Size Indicates the current size of the cache. The ca che stores the categorizati ons for the UR[...]

LANCOM Content Filter  Chapter 4: Status messages 46 EN  Hits Number of attempted calls of this website. T op - 10- Overidden- Hosts This table lists the ten most frequently calle d websites ac cessed using the override function.  Host Indicates the host of the website.  Category Indicates the category that the website is assigned to. ?[...]

LANCOM Content Filter  Chapter 4: Stat us messages 47 EN  Min se rv ti me Minimum time taken for the rating server to process a r equest.  Avg proc time Average time taken to proces s a URL.  Avg s e rv t im e Average time taken for the r ating server to process a r equest.  Proc timeouts Number of times that URL processing exceeded [...]

LANCOM Content Filter  Chapter 4: Status messages 48 EN  Max connections The maximum number of simultaneous connections to the content- filter proxy .  Proxy connections limit The maximum allowed number of connections to the content- filter proxy .  5min avg conn ections Number of connections to the content- filter proxy i n the last 5 [...]

LANCOM Content Filter  Chapter 5: T u torial: Using multip le content filter profiles 49 EN 5 T utorial: Using multiple content filter profiles This chapter shows how to use a number of content filter profiles to good effect and the settings that should be considered. The LANCOM Content Filter allows you to configure several co ntent filter prof[...]

LANCOM Content Filter  Chapter 5: T utorial: Using multiple content filter pr ofiles 50 EN 쐏 Y ou then create your content f ilter profiles under Profiles . A content- filter profile assigns the relevant category profiles and optional blacklists and whitelists to differ ent timeframes. The fire wall refers t o this content- filter profi le. ?[...]

LANCOM Content Filter  Chapter 5: T u torial: Using multip le content filter profiles 51 EN 쐆 After you have creat ed content filter pr ofiles for your em ployees and for your trainees , the overview of content filter profiles could look like this: If you have cr eated differ ent content fil ter profi l es, you will have to modif y the setting[...]

LANCOM Content Filter  Chapter 5: T utorial: Using multiple content filter pr ofiles 52 EN 쐅 Define a rule for the action ob ject CONTENT - FIL TER- EMPLOYEES:[...]

LANCOM Content Filter  Chapter 5: T u torial: Using multip le content filter profiles 53 EN 쐈 Under Actions assign the action object CONTENT - FIL TER- EMPLOYEES to the rule CF- EMPLO YEES:[...]

LANCOM Content Filter  Chapter 5: T utorial: Using multiple content filter pr ofiles 54 EN 쐉 Yo u s h o u l d n o w s p e c i f y f u rther details for the rule , e.g. whether the rule sh o u l d a p p ly t o a c e r t ai n I P ra n g e . T o m a k e t h is s e t t i n g , cl i c k o n Stations and specify a range of IP addres ses to which thi[...]