Barracuda Networks NextGen Web Filter Handleiding

Barracuda Networks Softwarelicentie & -uitbreiding NextGen Web Filter

Lees hieronder de 📖 handleiding in het Nederlandse voor Barracuda Networks NextGen Web Filter (7 pagina's) in de categorie Softwarelicentie & -uitbreiding. Deze handleiding was nuttig voor 46 personen en werd door 2 gebruikers gemiddeld met 4.5 sterren beoordeeld

Download PDF

Pagina 1/7

Barracuda CloudGen Firewall

How to Conﬁgure Web Filtering

1 / 7

How to Conﬁgure Web Filtering

Web ﬁltering allows you to control web access. To limit access to certain types of websites and restrict requests

from speciﬁc dedicated networks or users, conﬁgure URL ﬁltering policies. You can also exempt certain users

and IP addresses from ﬁltering, log which requests are allowed and denied, and specify the types of statistics

that are generated for the service.

On the Barracuda NG Firewall, you can use one of the following engines for web ﬁltering:

Barracuda NG Webﬁlter (IBM ISS) – The Barracuda NG Web Filter (IBM ISS) requires a

subscription. With the Barracuda NG Web Filter (IBM ISS), diﬀerent URL category databases can be stored

locally on the Barracuda NG Firewall.

Barracuda Web Filter (CFDEF) – The Barracuda Web Filter is included for free with a valid Energize

Updates subscription. It uses the same category database as the Barracuda NG Web Filter (IBM ISS) but

does not store a local copy of the database on the Barracuda NG Firewall. Instead, every URL is

requested through the cloud and the categories for the URLs are stored on the Barracuda NG Firewall.

You can also conﬁgure authentication for the web ﬁlter and display blocked URL categories with an external

HTTP server.

In this article:

Before you Begin

Enable the Barracuda Web Filter. For more information, see .How to Enable the Barracuda Web Filter

Conﬁgure Web Filtering

To conﬁgure web ﬁltering, complete these steps:

Step 1. Conﬁgure Web Filter Settings

You can conﬁgure the following settings for the web ﬁlter:

URL Filter Policies

Conﬁgure each policy to grant or deny access to speciﬁc URL categories. To determine the category of a

speciﬁc website, go to . A policy can also be restricted to onlyhttp://www.barracudacentral.org/lookups

certain networks and users that access the HTTP Proxy. If a request matches any networks, user groups, or

users that are speciﬁed in a policy, the policy is applied to it.

Policies are processed in an order that is determined by their name, which must be numerical. For example, a

policy named will be listed before a policy named . If you want to add a policy at the top of the0000123 023

processing list, include leading zeroes in its name.

By default, a whitelisting policy named is included in the table. You can edit, clone, or delete this policy. 999999

To create an URL ﬁlter policy:

Go to CONFIGURATION > Virtual Servers > >> Conﬁguration Tree > Box your virtual server1.

Assigned Services > HTTP Proxy > Web Filter Conﬁg.

Click .2. Lock

Barracuda CloudGen Firewall

How to Conﬁgure Web Filtering

2 / 7

From the list, select the ﬁlter that you want to use:3. Web Filter Type

Barracuda NG Webﬁlter (IBM ISS) – Requires a subscription.

Barracuda Web Filter (CFDEF) – Included in the Energize Updates subscription.

In the ﬁeld, enter the maximum duration of a URL category lookup.4. Timeout [s]

Select the check box.5. Enable Custom Categories

In the table, add (click ) or edit your URL ﬁltering policy. For more details on6. Categorization Policies +

the settings that you can conﬁgure for the policy, see .Categorization Policy Settings

To block requests that exceed the user limit of the URL Filter license, select the Block If User Limit7.

Exceeded check box.

To block requests when the URL Filter service is down, select the check box.8. Block If Service Down

Click and .9. Send Changes Activate

Deny Message

To inform users that their URL request has been denied, you can either conﬁgure an HTML page locally or

specify the URL of an external HTTP server that can display the deny message.

Go to CONFIGURATION > Virtual Servers > >> Conﬁguration Tree > Box your virtual server1.

Assigned Services > HTTP Proxy > Web Filter Conﬁg.

In the left menu, select .2. Deny Message

Click .3. Lock

To conﬁgure an HTML page locally:4.

From the list, select .1. Notiﬁcation Method Message

In the ﬁeld, conﬁgure the HTML page. To display information about the2. Displayed Message Text

denied request, use the variable.$$MESSAGE$$

To specify the URL of an external HTTP server for the deny message:5.

From the list, select .1. Notiﬁcation Method URL

In the ﬁeld, enter the URL of an external HTTP server capable of CGI that will2. Displayed URL

display the deny page. In the URL of the message server, you must specify the server protocol and

IP address. The port can be optionally speciﬁed. For example, .http://msgsrv.com:80

To append information about the denied request, select from the list.3. Yes Append Deny Query

Click and .6. Send Changes Activate

Exempt Users and IP Addresses

In the whitelist, you can add users or IP addresses that are exempt from ﬁltering.

Go to CONFIGURATION > Virtual Servers > >> Conﬁguration Tree > Box your virtual server1.

Assigned Services > HTTP Proxy > Web Filter Conﬁg.

In the left menu, select .2. Whitelists

Click .3. Lock

In the table, add whitelisted IP addresses.4. Whitelisted IPs

In the table, add whitelisted users.5. Whitelisted Users

Click and .6. Send Changes Activate

Logging and Statistics

You can enable the logging of denied and/or allowed URL requests, and select the types of statistics data that

should be generated for the HTTP Proxy URL ﬁlter.

Go to CONFIGURATION > Virtual Servers > >> Conﬁguration Tree > Box your virtual server1.

Assigned Services > HTTP Proxy > Web Filter Conﬁg.

Click .2. Lock

To conﬁgure logging:3.

Barracuda CloudGen Firewall

How to Conﬁgure Web Filtering

3 / 7

Select in the left menu.1. Log Policy

To log denied URL requests, select the check box.2. Log Denied URLs

To log allowed URL requests, select the check box.3. Log Allowed URLs

To conﬁgure statistics:4.

Select in the left menu.1. Statistics Policy

Select the check box of each statistics data type that should be generated.2.

Click and .5. Send Changes Activate

Additional Scanning with Third Party Software

For additional scanning with third party software products that are installed on the Barracuda NG Firewall (such

as virus scanning), you can optionally cascade the redirector.

Go to CONFIGURATION > Virtual Servers > >> Conﬁguration Tree > Box your virtual server1.

Assigned Services > HTTP Proxy > Web Filter Conﬁg.

In the left menu, select . 2. Cascaded Redirector

Click .3. Lock

To specify the cascaded redirector as the primary component in the scanning chain, select the Cascaded4.

is Primary check box. The URL request will be routed through the additional scanner before it is routed

through the URL Filter.

In the ﬁeld, enter the full path to the cascaded redirector in the Barracuda NG5. Cascaded Redirector

Firewall.

Click and .6. Send Changes Activate

Step 2. Activate the Web Filter

You can limit searches to use Google Safe Search. Google Safe Search is a third party content ﬁltering solution

to make using Google safe for children and users who do not want adult or explicit search results included. For

more information, see .Google Saftey Tools

Go to CONFIGURATION > Conﬁguration Tree > Box > Virtual Servers > your virtual server >1.

Assigned Services > HTTP Proxy > HTTP Proxy Settings.

In the left menu, select .2. Web Filter

Click .3. Lock

From the list, select . 4. Enable Content Filtering Yes

To activate for the HTTP Proxy service, select the ﬁltering level from the Google Safe Search Google5.

Safe Search list:

Moderate – Default setting. Excludes most explicit images from Google Images results but does

not ﬁlter ordinary web search results.

Strict – Applies SafeSearch ﬁltering to all search results (i.e. both image search and ordinary

web search).

Very Safe Search – Strictest level for limiting search results and potential exposure to graphic

content.

If you want to increase the number of simultaneously working redirectors for high traﬃc processing: 6.

Select from the menu.1. Switch to Advanced View Conﬁguration Mode

In the ﬁeld, enter the number of simultaneously working redirectors2. Number of Redirectors

(default: 5).

If you change the default value for the setting, specify the same valueNumber of Redirectors

for the setting for the service.Max URL Filter Processes URL Filter

Click and .7. Send Changes Activate

Product specificaties

Merk:	Barracuda Networks
Categorie:	Softwarelicentie & -uitbreiding
Model:	NextGen Web Filter
Compatibiliteit:	Barracuda Networks NextGen Firewall F900
Aantal licenties:	- licentie(s)
Licentie termijn (jaren):	1 jaar