Page 176 / 335 Scroll up to view Page 171 - 175
Vigor2710 Series User’s Guide
164
Profile Name
Type a name for the CSM profile.
Select All
Click it to choose all of the items in this page.
Clear All
Uncheck all the selected boxes.
The profiles configured here can be applied in the
Firewall>>General Setup
and
Firewall>>Filter Setup
pages as the standard for the host(s) to follow.
The items categorized under
P2P -----
The items categorized under
Misc -----
4.6.2 URL Content Filter Profile
To provide an appropriate cyberspace to users, Vigor router equips with
URL Content Filter
not only to limit illegal traffic from/to the inappropriate web sites but also prohibit other web
feature where malicious code may conceal.
Once a user type in or click on an URL with objectionable keywords, URL keyword blocking
facility will decline the HTTP request to that web page thus can limit user’s access to the
website. You may imagine
URL Content Filter
as a well-trained convenience-store clerk
who won’t sell adult magazines to teenagers. At office,
URL Content Filter
can also provide
a job-related only environment hence to increase the employee work efficiency. How can
URL Content Filter work better than traditional firewall in the field of filtering? Because it
checks the URL strings or some of HTTP data hiding in the payload of TCP packets while
legacy firewall inspects packets based on the fields of TCP/IP headers only.
On the other hand, Vigor router can prevent user from accidentally downloading malicious
codes from web pages. It’s very common that malicious codes conceal in the executable
objects, such as ActiveX, Java Applet, compressed files, and other executable files. Once
downloading these types of files from websites, you may risk bringing threat to your system.
Page 177 / 335
Vigor2710 Series User’s Guide
165
For example, an ActiveX control object is usually used for providing interactive web feature.
If malicious code hides inside, it may occupy user’s system.
For example, if you add key words such as “sex”, Vigor router will limit web access to web
sites or web pages such as “www.sex.com”, ”www.backdoor.net/images/sex/p_386.html”.
Or you may simply specify the full or partial URL such as “www.sex.com” or “sex.com”.
Also the Vigor router will discard any request that tries to retrieve the malicious code.
Click
CSM
and click
URL Content Filter Profile
to open the profile setting page.
You can set eight profiles as URL content filter. Simply click the index number under Profile
to open the following web page.
Profile Name
Type a name for the CSM profile.
Priority
It determines the action that this router will apply.
Both: Pass
– The router will let all the packages that match
with the conditions specified in URL Access Control and Web
Page 178 / 335
Vigor2710 Series User’s Guide
166
Feature below passing through. When you choose this setting,
both configuration set in this page for URL Access Control
and Web Feature will be inactive.
Both:Block
–The router will block all the packages that match
with the conditions specified in URL Access Control and Web
Feature below. When you choose this setting, both
configuration set in this page for URL Access Control and
Web Feature will be inactive.
Either: URL Access Control First
– When all the packages
matching with the conditions specified in URL Access Control
and Web Feature below, such function can determine the
priority for the actions executed. For this one, the router will
process the packages with the conditions set below for URL
first, then Web feature second.
Either: Web Feature First
–When all the packages matching
with the conditions specified in URL Access Control and Web
Feature below, such function can determine the priority for the
actions executed. For this one, the router will process the
packages with the conditions set below for web feature first,
then URL second.
Log
None
– There is no log file will be recorded for this profile.
Pass
– Only the log about Pass will be recorded in Syslog.
Block
– Only the log about Block will be recorded in Syslog.
All
– All the actions (Pass and Block) will be recorded in
Syslog.
URL Access Control
Enable URL Access Control
- Check the box to activate URL
Access Control. Note that the priority for
URL Access
Control
is higher than
Restrict Web Feature
. If the web
content match the setting set in URL Access Control, the
router will execute the action specified in this field and ignore
the action specified under Restrict Web Feature.
Prevent web access from IP address
- Check the box to deny
any web surfing activity using IP address, such as
http://202.6.3.2. The reason for this is to prevent someone
dodges the URL Access Control. You must clear your browser
cache first so that the URL content filtering facility operates
properly on a web page that you visited before.
Action
– This setting is available only when
Either : URL
Page 179 / 335
Vigor2710 Series User’s Guide
167
Access Control First
or
Either : Web Feature First
is
selected.
Pass
-
Allow accessing into the corresponding
webpage with the keywords listed on the box below.
Block -
Restrict accessing into the corresponding webpage
with the keywords listed on the box below.
If the web pages do not match with the keyword set here, it
will be processed with reverse action.
Group/Object Selections
– The Vigor router provides several
frames for users to define keywords and each frame supports
multiple keywords. The keyword could be a noun, a partial
noun, or a complete URL string. Multiple keywords within a
frame are separated by space, comma, or semicolon. In
addition, the maximal length of each frame is 32-character
long. After specifying keywords, the Vigor router will decline
the connection request to the website whose URL string
matched to any user-defined keyword. It should be noticed that
the more simplified the blocking keyword list is, the more
efficiently the Vigor router performs.
Web Feature
Enable Restrict Web Feature -
Check this box to make the
keyword being blocked or passed.
Action -
This setting is available only when
Either: URL
Access Control First
or
Either: Web Feature Firs
is
selected.
Pass
allows accessing into the corresponding
webpage with the keywords listed on the box below.
Pass
-
Allow accessing into the corresponding webpage with
the keywords listed on the box below.
Block
-
Restrict accessing into the corresponding webpage
with the keywords listed on the box below.
If the web pages do not match with the specified feature set
Page 180 / 335
Vigor2710 Series User’s Guide
168
here, it will be processed with reverse action.
Cookie
-
Check the box to filter out the cookie transmission
from inside to outside world to protect the local user's privacy.
Proxy
-
Check the box to reject any proxy transmission. To
control efficiently the limited-bandwidth usage, it will be of
great value to provide the blocking mechanism that filters out
the multimedia files downloading from web pages.
File Extension Profile –
Choose one
of the profiles that you
configured in
Object Setting>> File Extension Objects
previously for passing or blocking the file downloading.
4.6.3 Web Content Filter Profile
Note:
Web Content Filter (WCF) service is powered by
Commtouch
, the partner of
DrayTek. The product name is GlobalView WCF.
There are three ways to activate WCF on vigor router, using
Service Activation
Wizard
, by
means of
CSM>>Web Content Filter Profile
or via
System Maintenance>>Activation
.
Service Activation Wizard allows you to use trial version or update the license of WCF
directly without accessing into the server (
MyVigor
.
However, if you use the
Web Content Filter Profile
page to activate WCF feature, it is
necessary for you to access into the server (
MyVigor
Therefore, you need to register an account on http://myvigor.draytek.com for using
corresponding service. Please refer to section of creating MyVigor account.
WCF adopts the mechanism developed and offered by certain service provider (e.g.,
DrayTek). No matter activating WCF feature or getting a new license for web content filter,
you have to click
Activate
to satisfy your request. Be aware that service provider matching
with Vigor router currently offers a period of time for trial version for users to experiment. If
you want to purchase a formal edition, simply contact with the channel partner or your
dealer.
Click
CSM
and click
Web Content Filter Profile
to open the profile setting page. The
default setting for Setup Query Server /Setup Test Server is
auto-selected
. You can choose
another server for your necessity by clicking
Find more
for searching another qualified and suitable one.

Rate

4 / 5 based on 1 vote.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top