Version 1.01, published July 2008
To be used with the ProxyBlocker Authentication User Guide
version 1.01 for software release 2.1.00
Printed in the United States of America
This document may not, in whole or in part, be copied, photocopied, reproduced, translated, or reduced to any electronic
medium or machine readable form without prior written consent from 8e6 Technologies.
Every effort has been made to ensure the accuracy of this
document. However, 8e6 Technologies makes no warranties
with respect to this documentation and disclaims any implied
warranties of merchantability and fitness for a particular purpose. 8e6 Technologies shall not be liable for any error or for
incidental or consequential damages in connection with the
furnishing, performance, or use of this manual or the examples herein. Due to future enhancements and modifications of
this product, the information described in this documentation
is subject to change without notice.
The latest version of this document can be obtained from
http://www.8e6.com/docs/pba_ug.pdf.
Trademarks
Other product names mentioned in this manual may be trademarks or registered trademarks of their respective companies
and are the sole property of their respective manufacturers.
INDEX .......................................................................455
xiv8E6 TECHNOLOGIES, PROXYBLOCKER USER GUIDE
INTRODUCTORY SECTION8E6 PROXYBLOCKER
INTRODUCTORY SECTION
8e6 ProxyBlocker
8e6 Technologies’ 8e6 ProxyBlocker offers a solution for
organizations using an Internet filtering product other than
8e6’s R3000 Enterprise Filter. 8e6 ProxyBlocker tracks
each user’s online activity of Web-based proxies and anonymizers, and can be configured to block specific Web sites
or service ports, thereby protecting your organization
against lost productivity, network bandwidth issues, and
possible legal problems that can result from the misuse of
Internet resources.
About this User Guide
The 8e6 ProxyBlocker User Guide primarily addresses the
network administrator designated to configure and manage
the 8e6 ProxyBlocker server on the network. This administrator is referred to as the “global administrator” throughout
this user guide. In part, this user guide also addresses
administrators who manage user groups on the network.
These administrators are referred to as “group administrators” throughout this user guide. Additional information is
provided for administrators of networks that use 8e6 ProxyBlocker with 8e6’s Enterprise Reporter (ER) for both filtering
and reporting.
See the 8e6 ProxyBlocker Authentication User Guide at
http://www.8e6.com/docs/pba_auth_ug.pdf for information on authentication.
This user guide is organized into the following sections:
• Introductory Section - This section is comprised of an
overview on filtering, Web access logging, and instant
messaging and peer-to-peer blocking. This section also
8E6 TECHNOLOGIES, PROXYBLOCKER USER GUIDE1
INTRODUCTORY SECTIONABOUTTHIS USER GUIDE
provides information on how to use this user guide to
help you configure the ProxyBlocker.
• Global Administrator Section - This section includes
information for the global administrator—who has all
rights and permissions on the ProxyBlocker box—to
create group administrator accounts, and to configure
the ProxyBlocker for use on the network.
• Group Administrator Section - This section includes
information for administrators authorized by the global
administrator to manage profiles of designated groups
and their associated users on the 8e6 ProxyBlocker.
Group administrators also have rights to access certain
library category functions.
• Technical Support / Product Warranties Section -
This section contains information on technical support
and product warranties
• Appendices - Appendix A includes formats and rules
used in the filtering profile file. Appendix B provides a list
of messages that display when 8e6’s executable
program “Traveler” is launched and attempts to download updates to the ProxyBlocker server. Appendix C
includes information on creating a customized block
page. Appendix D provides tips on how to override pop-
up windows with pop-up blocker software installed.
Appendix E includes information on configuring the ProxyBlocker to work with 8e6’s Enterprise Reporter (ER)
application. Appendix F includes information about RAID
maintenance and troubleshooting on a ProxyBlocker
“SL” server. Appendix G features a glossary of technical
terminology used in this user guide.
• Index - This section includes an index of subjects and
the first page numbers where they appear in this user
guide.
28E6 TECHNOLOGIES, PROXYBLOCKER USER GUIDE
INTRODUCTORY SECTIONHOWTO USETHIS USER GUIDE
How to Use this User Guide
Conventions
The following icons are used throughout this user guide:
NOTE: The “note” icon is followed by italicized text providing
additional information about the current subject.
TIP: The “tip” icon is followed by italicized text giving you hints on
how to execute a task more efficiently.
WARNING: The “warning” icon is followed by italicized text
cautioning you about making entries in the application, executing
certain processes or procedures, or the outcome of specified
actions.
8E6 TECHNOLOGIES, PROXYBLOCKER USER GUIDE3
INTRODUCTORY SECTIONHOWTO USETHIS USER GUIDE
Terminology
The following terms are used throughout this user guide.
Sample images (not to scale) are included for each item.
• alert box - a message box
that opens in response to
an entry you made in a
dialog box, window, or
screen. This box often
contains a button (usually
labeled “OK”) for you to click in order to confirm or
execute a command.
• button - an object in a dialog box,
window, or screen that can be clicked
with your mouse to execute a command.
• checkbox - a small square in a dialog
box, window, or screen used for indicating whether or not you wish to select an option. This
object allows you to toggle between two choices. By
clicking in this box, a check mark or an “X” is placed, indicating that you selected the option. When this box is not
checked, the option is not selected.
• dialog box - a box that
opens in response to a
command made in a
window or screen, and
requires your input. You
must choose an option by
clicking a button (such as “Yes” or “No”, or “Next” or
“Cancel”) to execute your command. As dictated by this
box, you also might need to make one or more entries or
selections prior to clicking a button.
• field - an area in a dialog box,
window, or screen that either
accommodates your data
48E6 TECHNOLOGIES, PROXYBLOCKER USER GUIDE
INTRODUCTORY SECTIONHOWTO USETHIS USER GUIDE
entry, or displays pertinent information. A text box is a
type of field.
• frame - a boxed-in area in a dialog
box, window, or screen that
includes a group of objects such as
fields, text boxes, list boxes,
buttons, radio buttons, checkboxes, and/or tables. Objects within a frame belong to a
specific function or group. A frame often is labeled to indicate its function or purpose.
• grid - an area in
a frame that
displays rows
and columns of
data, as a result of various processes. This data can be
reorganized in the Administrator console, by changing
the order of the columns.
• list box - an area in a dialog box,
window, or screen that accommodates and/or displays entries of
items that can be added or removed.
• navigation panel - the panel that
displays at the left of a screen. This
panel can contain links that can be
clicked to open windows or dialog boxes
at the right of the screen. One or more
tree lists also can display in this panel.
When an item in the tree list is clicked,
the tree list opens to reveal items that
can be selected.
8E6 TECHNOLOGIES, PROXYBLOCKER USER GUIDE5
INTRODUCTORY SECTIONHOWTO USETHIS USER GUIDE
• pop-up box or pop-up
window - a box or window
that opens after you click a
button in a dialog box,
window, or screen. This box
or window may display
information, or may require
you to make one or more entries. Unlike a dialog box,
you do not need to choose between options.
• pull-down menu - a field in a
dialog box, window, or screen
that contains a down-arrow to the right. When you click
the arrow, a menu of items displays from which you make
a selection.
• radio button - a small, circular object
in a dialog box, window, or screen
used for selecting an option. This object allows you to
toggle between two choices. By clicking a radio button, a
dot is placed in the circle, indicating that you selected the
option. When the circle is empty, the option is not
selected.
• screen - a main
object of an application that
displays across
your monitor. A
screen can
contain panels,
windows, frames,
fields, tables, text
boxes, list boxes,
icons, buttons,
and radio buttons.
68E6 TECHNOLOGIES, PROXYBLOCKER USER GUIDE
INTRODUCTORY SECTIONHOWTO USETHIS USER GUIDE
• sub-topic - a subset
of a main topic that
displays as a menu
item for the topic. The
menu of sub-topics
opens when a pertinent topic link in the left panel—the navigation panel—of
a screen is clicked. If a sub-topic is selected, the window
for that sub-topic displays in the right panel of the screen,
or a pop-up window or an alert box opens, as appropriate.
• text box - an area in a dialog box, window, or screen that
accommodates your data entry. A text box is a type of
field. (See “field”.)
• topic - a topic
displays as a
link in the left
panel—the
navigation
panel—of a
screen. By
clicking the link
for a topic, the
window for that
topic displays in
the right panel of the screen, or a menu of sub-topics
opens.
8E6 TECHNOLOGIES, PROXYBLOCKER USER GUIDE7
INTRODUCTORY SECTIONHOWTO USETHIS USER GUIDE
• tree - a tree displays in the navigation panel of a screen, and is
comprised of a hierarchical list of
items. An entity associated with a
branch of the tree is preceded by a
plus (+) sign when the branch is
collapsed. By double-clicking the
item, a minus (-) sign replaces the
plus sign, and any entity within that
branch of the tree displays. An item
in the tree is selected by clicking it.
• window - a window
displays on a screen,
and can contain
frames, fields, text
boxes, list boxes,
buttons, checkboxes,
and radio buttons. A
window for a topic or
sub-topic displays in
the right panel of the
screen. Other types
of windows include pop-up windows, login windows, or
ones from the system such as the Save As or Choose file
windows.
88E6 TECHNOLOGIES, PROXYBLOCKER USER GUIDE
Overview
The ProxyBlocker’s Administrator console is used by the
global administrator—and group administrator, as
required—to configure the ProxyBlocker server to perform
the following basic functions:
• filter URLs (Web addresses) on the Internet
• log traffic on the Internet
and, if applicable for your organization:
• block instant messaging and peer-to-peer services
• authenticate users via the existing authentication system
on the network
NOTE: See the 8e6 ProxyBlocker Authentication User Guide at
http://www.8e6.com/docs/pba_auth_ug.pdf for information on
setting up and using authentication.
To help you become familiar with the ProxyBlocker and how
it functions on the network, Chapter 1 of this section of the
User Guide provides an overview on filtering. Chapter 2
gives insight into Web site access logging, and instant
messaging and peer-to-peer setup procedures. Chapter 3
includes details on getting started, with log in and log out
procedures, and tips on navigating the Administrator
console.
INTRODUCTORY SECTIONOVERVIEW
8E6 TECHNOLOGIES, PROXYBLOCKER USER GUIDE9
INTRODUCTORY SECTIONENVIRONMENT REQUIREMENTS
Environment Requirements
Workstation Requirements
Minimum system requirements for the administrator include
the following:
•Windows 2000 or later operating system (not compatible
with Windows server 2003) running Internet Explorer (IE)
6.0 or later (Windows Vista running IE7)
•Macintosh OS X Version 10.5 running Safari 2.0, Firefox
2.0
•JavaScript enabled
•Java Virtual Machine
•Java Plug-in (use the version specified for the ProxyBlocker software version)
NOTE: 8e6 ProxyBlocker administrators must be set up with software installation privileges in order to install Java used for
accessing the interface.
Network Requirements
•High speed connection from the ProxyBlocker server to
the client workstations
•HTTPS connection to 8e6’s software update server
•Internet connectivity for downloading Java virtual
machine, if not already installed
The ProxyBlocker is set up in the invisible mode, indicating
that the unit will filter all connections on the Ethernet
between client PCs and the Internet, without stopping each
IP packet on the same Ethernet segment. The unit will only
intercept a session if an inappropriate request was
submitted by a client. In this scenario, the ProxyBlocker
returns a message to the client and server to deny the
request, and a block page displays to deny the client access
to the site or service.
Figure 1:1-1 depicts the invisible mode that removes the
ProxyBlocker from any inclusion in the network connection
path.
When users (Client PCs) make Internet requests, the traffic
flows (1) through the network path without interruption. The
ProxyBlocker captures the request as the user’s request (2)
leaves the network. The ProxyBlocker then determines the
action (3) to either block or pass the request. If the ProxyBlocker determines to block the user’s request, a block
message (4) is sent to the user plus a terminate message
(4) is sent to the Internet server.
In the invisible mode, the ProxyBlocker performs as a standalone server that can be connected to any network environment.
128E6 TECHNOLOGIES, PROXYBLOC KER USER GUIDE
Group Types
After the operational filtering mode is configured on the
ProxyBlocker, the group type(s) that will be used on the
ProxyBlocker must be set up so that filtering can take place.
In the Group section of the Administrator console, group
types are structured in a tree format in the navigation panel.
The global administrator can access the Global Group and
IP groups in the tree. The group administrator can only
access the designated IP group to be maintained.
NOTE: If authentication is enabled, the global administrator can
also access the NT and LDAP branches of the tree.
Global Group
The first group that must be set up is the global group,
represented in the tree structure by the global icon.
The filtering profile created for the global group represents
the default profile to be used by all groups that do not have
a filtering profile, and all users who do not belong to a group.
The IP group type is represented in the tree by the IP icon
. A master IP group is comprised of sub-group members
and/or individual IP members .
The global administrator adds master IP groups, adds and
maintains override accounts at the global level, and establishes and maintains the minimum filtering level.
The group administrator of a master IP group adds subgroup and individual IP members, override account, time
profiles and exception URLs, and maintains filtering profiles
of all members in the master IP group.
Fig. 1:1-2 IP diagram with a sample master IP group and its members
A filtering profile is used by all users who are set up to be
filtered on the network. This profile consists of rules that
dictate whether a user has access to a specified Web site or
service on the Internet.
The following types of filtering profiles can be created,
based on the set up in the tree menu of the Group section of
the console:
Global Group
• global filtering profile - the default filtering profile positioned at the base of the hierarchical tree structure, used
by end users who do not belong to a group.
IP group (master group)
•master group filtering profile - used by end users who
belong to the master group.
•master time profile - used by master group users at a
specified time.
IP group member
• sub-group filtering profile - used by a sub-group
member.
•individual filtering profile - used by an individual IP
group member.
•time profile - used by a sub-group/individual IP group
member at a specified time.
Other filtering profiles
•authentication profile - used by NT and/or LDAP group
members.
NOTE: For information about authentication filtering profiles, see
the 8e6 ProxyBlocker Authentication User Guide.
•override account profile - set up in either the global
group section or the master group section of the console.
•lock profile - set up under X Strikes Blocking in the Filter
Options section of the profile.
Static Filtering Profiles
Static filtering profiles are based on fixed IP addresses and
include profiles for master IP groups and their members.
Master IP Group Filtering Profile
The master IP group filtering profile is created by the global
administrator and is maintained by the group administrator.
This filtering profile is used by members of the group—
including sub-group and individual IP group members—and
is customized to allow/deny users access to URLs, or warn
users about accessing specified URLs, to redirect users to
another URL instead of having a block page display, and to
specify usage of appropriate filter options.
IP Sub-Group Filtering Profile
An IP sub-group filtering profile is created by the group
administrator. This filtering profile applies to end users in an
IP sub-group and is customized for sub-group members.
Individual IP Member Filtering Profile
An individual IP member filtering profile is created by the
group administrator.This filtering profile applies to a specified end user in a master IP group.
168E6 TECHNOLOGIES, PROXYBLOC KER USER GUIDE
Loading...
+ 452 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.