Page 141 / 275 Scroll up to view Page 136 - 140
Vigor2110 Series User’s Guide
134
Vigor router will then decide whether to allow access to this site according to the categories you
have selected. Please note that this action will not introduce any delay in your Web surfing
because each of multiple load balanced database servers can handle millions of requests for
categorization.
Note:
The priority of URL Content Filter is higher than Web Content Filter.
4.7.1 IM/P2P Filter Profile
You can define policy profiles for different policy of IM (Instant Messenger)/P2P (Peer to
Peer) application. CSM profile can be used in Filter Setup page.
Set to Factory Default
Clear all profiles.
Click the number under Index column for settings in detail.
Profile Name
Type a name for the CSM profile.
Page 142 / 275
Vigor2110 Series User’s Guide
135
Each profile can contain three objects settings, IM Object, P2P Object and Misc Object. Such
profile can be applied in the
Firewall>>General Setup
and
Firewall>>Filter Setup
pages as
the standard for the host(s) to follow.
4.7.2 URL Content Filter Profile
To provide an appropriate cyberspace to users, Vigor router equips with
URL Content Filter
not only to limit illegal traffic from/to the inappropriate web sites but also prohibit other web
feature where malicious code may conceal.
Once a user type in or click on an URL with objectionable keywords, URL keyword blocking
facility will decline the HTTP request to that web page thus can limit user’s access to the
website. You may imagine
URL Content Filter
as a well-trained convenience-store clerk who
won’t sell adult magazines to teenagers. At office,
URL Content Filter
can also provide a
job-related only environment hence to increase the employee work efficiency. How can URL
Content Filter work better than traditional firewall in the field of filtering? Because it checks
the URL strings or some of HTTP data hiding in the payload of TCP packets while legacy
firewall inspects packets based on the fields of TCP/IP headers only.
On the other hand, Vigor router can prevent user from accidentally downloading malicious
codes from web pages. It’s very common that malicious codes conceal in the executable objects,
such as ActiveX, Java Applet, compressed files, and other executable files. Once downloading
these types of files from websites, you may risk bringing threat to your system. For example, an
ActiveX control object is usually used for providing interactive web feature. If malicious code
hides inside, it may occupy user’s system.
For example, if you add key words such as “sex”, Vigor router will limit web access to web
sites or web pages such as “www.sex.com”, ”www.backdoor.net/images/sex/p_386.html”. Or
you may simply specify the full or partial URL such as “www.sex.com” or “sex.com”.
Also the Vigor router will discard any request that tries to retrieve the malicious code.
Click
CSM
and click
URL Content Filter Profile
to open the profile setting page.
You can set eight profiles as URL content filter. Simply click the index number under Profile
to open the following web page.
Page 143 / 275
Vigor2110 Series User’s Guide
136
Profile Name
Type the name for such profile.
Priority
It determines the action that this router will apply.
Both: Pass
– The router will let all the packages that match with the
conditions specified in URL Access Control and Web Feature below
passing through. When you choose this setting, both configuration
set in this page for URL Access Control and Web Feature will be
inactive.
Both:Block
–The router will block all the packages that match with
the conditions specified in URL Access Control and Web Feature
below. When you choose this setting, both configuration set in this
page for URL Access Control and Web Feature will be inactive.
Either: URL Access Control First
– When all the packages
matching with the conditions specified in URL Access Control and
Web Feature below, such function can determine the priority for the
actions executed. For this one, the router will process the packages
with the conditions set below for URL first, then Web feature second.
Either: Web Feature First
–When all the packages matching with
the conditions specified in URL Access Control and Web Feature
below, such function can determine the priority for the actions
executed. For this one, the router will process the packages with the
conditions set below for web feature first, then URL second.
Log
None
– There is no log file will be recorded for this profile.
Pass
– Only the log about Pass will be recorded in Syslog.
Block
– Only the log about Block will be recorded in Syslog.
Page 144 / 275
Vigor2110 Series User’s Guide
137
All
– All the actions (Pass and Block) will be recorded in Syslog.
URL Access Control
Enable URL Access Control
- Check the box to activate URL
Access Control. Note that the priority for
URL Access Control
is
higher than
Restrict Web Feature
. If the web content match the
setting set in URL Access Control, the router will execute the action
specified in this field and ignore the action specified under Restrict
Web Feature.
Prevent web access from IP address
- Check the box to deny any
web surfing activity using IP address, such as http://202.6.3.2. The
reason for this is to prevent someone dodges the URL Access
Control. You must clear your browser cache first so that the URL
content filtering facility operates properly on a web page that you
visited before.
Action
– This setting is available only when
Either : URL Access
Control First
or
Either : Web Feature First
is selected.
Pass
-
Allow accessing into the corresponding webpage with the keywords
listed on the box below.
Block -
Restrict accessing into the corresponding webpage with the
keywords listed on the box below.
If the web pages do not match with the keyword set here, it will be
processed with reverse action.
Group/Object Selections
– The Vigor router provides several
frames for users to define keywords and each frame supports
multiple keywords. The keyword could be a noun, a partial noun, or
a complete URL string. Multiple keywords within a frame are
separated by space, comma, or semicolon. In addition, the maximal
length of each frame is 32-character long. After specifying keywords,
the Vigor router will decline the connection request to the website
whose URL string matched to any user-defined keyword. It should
be noticed that the more simplified the blocking keyword list, the
more efficiently the Vigor router perform.
Page 145 / 275
Vigor2110 Series User’s Guide
138
Web Feature
Enable Restrict Web Feature -
Check this box to make the
keyword being blocked or passed.
Action -
This setting is available only when
Either: URL Access
Control First
or
Either : Web Feature Firs
is selected.
Pass
allows accessing into the corresponding webpage with the keywords
listed on the box below.
Pass
-
Allow accessing into the corresponding webpage with the
keywords listed on the box below.
Block
-
Restrict accessing into the corresponding webpage with the
keywords listed on the box below.
If the web pages do not match with the specified feature set here, it
will be processed with reverse action.
Cookie
-
Check the box to filter out the cookie transmission from
inside to outside world to protect the local user's privacy.
Proxy
-
Check the box to reject any proxy transmission. To control
efficiently the limited-bandwidth usage, it will be of great value to
provide the blocking mechanism that filters out the multimedia files
downloading from web pages.
File Extension Profile –
Choose one
of the profiles that you
configured in
Object Setting>> File Extension Objects
previously
for passing or blocking the file downloading.

Rate

4.7 / 5 based on 3 votes.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top