DrayTek Vigor-2920 Router Manual PDF (Setup & Configuration Guide)

Page 136 / 251 Scroll up to view Page 131 - 135

Vigor2920 Series User’s Guide

126

Each profile can contain three objects settings, IM Object, P2P Object and Misc Object. Such

profile can be applied in the

Firewall>>General Setup

and

Firewall>>Filter Setup

pages as

the standard for the host(s) to follow.

4.6.2 URL Content Filter Profile

To provide an appropriate cyberspace to users, Vigor router equips with

URL Content Filter

not only to limit illegal traffic from/to the inappropriate web sites but also prohibit other web

feature where malicious code may conceal.

Once a user type in or click on an URL with objectionable keywords, URL keyword blocking

facility will decline the HTTP request to that web page thus can limit user’s access to the

website. You may imagine

URL Content Filter

as a well-trained convenience-store clerk who

won’t sell adult magazines to teenagers. At office,

URL Content Filter

can also provide a

job-related only environment hence to increase the employee work efficiency. How can URL

Content Filter work better than traditional firewall in the field of filtering? Because it checks

the URL strings or some of HTTP data hiding in the payload of TCP packets while legacy

firewall inspects packets based on the fields of TCP/IP headers only.

On the other hand, Vigor router can prevent user from accidentally downloading malicious

codes from web pages. It’s very common that malicious codes conceal in the executable objects,

such as ActiveX, Java Applet, compressed files, and other executable files. Once downloading

these types of files from websites, you may risk bringing threat to your system. For example, an

ActiveX control object is usually used for providing interactive web feature. If malicious code

hides inside, it may occupy user’s system.

For example, if you add key words such as “sex”, Vigor router will limit web access to web

sites or web pages such as “www.sex.com”, ”www.backdoor.net/images/sex/p_386.html”. Or

you may simply specify the full or partial URL such as “www.sex.com” or “sex.com”.

Also the Vigor router will discard any request that tries to retrieve the malicious code.

Click

CSM

and click

URL Content Filter Profile

to open the profile setting page.

You can set eight profiles as URL content filter. Simply click the index number under Profile

to open the following web page.

VoIPon

www.voipon.co.uk

[email protected]

Tel: +44 (0)1245 808195

Fax: +44 (0)1245 808299

Page 137 / 251

Vigor2920 Series User’s Guide

127

Profile Name

Type the name for such profile.

Priority

It determines the action that this router will apply.

Both: Pass

– The router will let all the packages that match with the

conditions specified in URL Access Control and Web Feature below

passing through. When you choose this setting, both configuration

set in this page for URL Access Control and Web Feature will be

inactive.

Both:Block

–The router will block all the packages that match with

the conditions specified in URL Access Control and Web Feature

below. When you choose this setting, both configuration set in this

page for URL Access Control and Web Feature will be inactive.

Either: URL Access Control First

– When all the packages

matching with the conditions specified in URL Access Control and

Web Feature below, such function can determine the priority for the

actions executed. For this one, the router will process the packages

with the conditions set below for URL first, then Web feature second.

Either: Web Feature First

–When all the packages matching with

the conditions specified in URL Access Control and Web Feature

below, such function can determine the priority for the actions

executed. For this one, the router will process the packages with the

conditions set below for web feature first, then URL second.

Log

None

– There is no log file will be recorded for this profile.

Pass

– Only the log about Pass will be recorded in Syslog.

Block

– Only the log about Block will be recorded in Syslog.

VoIPon

www.voipon.co.uk

[email protected]

Tel: +44 (0)1245 808195

Fax: +44 (0)1245 808299

Page 138 / 251

Vigor2920 Series User’s Guide

128

All

– All the actions (Pass and Block) will be recorded in Syslog.

URL Access Control

Enable URL Access Control

- Check the box to activate URL

Access Control. Note that the priority for

URL Access Control

is

higher than

Restrict Web Feature

. If the web content match the

setting set in URL Access Control, the router will execute the action

specified in this field and ignore the action specified under Restrict

Web Feature.

Prevent web access from IP address

- Check the box to deny any

web surfing activity using IP address, such as http://202.6.3.2. The

reason for this is to prevent someone dodges the URL Access

Control. You must clear your browser cache first so that the URL

content filtering facility operates properly on a web page that you

visited before.

Action

– This setting is available only when

Either : URL Access

Control First

or

Either : Web Feature First

is selected.

Pass

-

Allow accessing into the corresponding webpage with the keywords

listed on the box below.

Block -

Restrict accessing into the corresponding webpage with the

keywords listed on the box below.

If the web pages do not match with the keyword set here, it will be

processed with reverse action.

Group/Object Selections

– The Vigor router provides several

frames for users to define keywords and each frame supports

multiple keywords. The keyword could be a noun, a partial noun, or

a complete URL string. Multiple keywords within a frame are

separated by space, comma, or semicolon. In addition, the maximal

length of each frame is 32-character long. After specifying keywords,

the Vigor router will decline the connection request to the website

whose URL string matched to any user-defined keyword. It should

be noticed that the more simplified the blocking keyword list, the

more efficiently the Vigor router perform.

VoIPon

www.voipon.co.uk

[email protected]

Tel: +44 (0)1245 808195

Fax: +44 (0)1245 808299

Page 139 / 251

Vigor2920 Series User’s Guide

129

Web Feature

Enable Restrict Web Feature -

Check this box to make the

keyword being blocked or passed.

Action -

This setting is available only when

Either: URL Access

Control First

or

Either: Web Feature Firs

is selected.

Pass

allows

accessing into the corresponding webpage with the keywords listed

on the box below.

Pass

-

Allow accessing into the corresponding webpage with the

keywords listed on the box below.

Block

-

Restrict accessing into the corresponding webpage with the

keywords listed on the box below.

If the web pages do not match with the specified feature set here, it

will be processed with reverse action.

Cookie

-

Check the box to filter out the cookie transmission from

inside to outside world to protect the local user's privacy.

Proxy

-

Check the box to reject any proxy transmission. To control

efficiently the limited-bandwidth usage, it will be of great value to

provide the blocking mechanism that filters out the multimedia files

downloading from web pages.

File Extension Profile –

Choose one

of the profiles that you

configured in

Object Setting>> File Extension Objects

previously

VoIPon

www.voipon.co.uk

[email protected]

Tel: +44 (0)1245 808195

Fax: +44 (0)1245 808299

Page 140 / 251

Vigor2920 Series User’s Guide

130

for passing or blocking the file downloading.

4.6.3 Web Content Filter Profile

We all know that the content on the Internet just like other types of media may be

inappropriate sometimes. As a responsible parent or employer, you should protect those in your

trust against the hazards. With Web filtering service of the Vigor router, you can protect your

business from common primary threats, such as productivity, legal liability, network and

security threats. For parents, you can protect your children from viewing adult websites or chat

rooms.

Once you have activated your Web Filtering service in Vigor router and chosen the categories of

website you wish to restrict, each URL address requested (e.g.www.bbc.co.uk) will be checked

against our server database. This database is updated as frequent as daily by a global team of

Internet researchers. The server will look up the URL and return a category to your router. Your

Vigor router will then decide whether to allow access to this site according to the categories you

have selected. Please note that this action will not introduce any delay in your Web surfing

because each of multiple load balanced database servers can handle millions of requests for

categorization.

Click

CSM

and click

Web Content Filter Profile

to open the profile setting page.

Setup Query Server

It is recommend for you to use the default setting, auto-selected. You

need to specify a server for categorize searching when you type URL

in browser based on the web content filter profile.

Setup Test Server

It is recommend for you to use the default setting, auto-selected. By

the way, you can click the link of

Test a site to verify whether it is

categorized

to access into the test server selected.

You can set eight profiles as Web content filter. Simply click the index number under Profile

to open the following web page.

VoIPon

www.voipon.co.uk

[email protected]

Tel: +44 (0)1245 808195

Fax: +44 (0)1245 808299

Rate

Popular DrayTek Models

Famous Router IPs

Famous Router Companies

Bookmark Our Site

Share