iPrism Admin Guide

239 Pages·2013·4.21 MB·English

Administration Guide
V7.110
iPrism Web Security
800-782-3762
www.edgewave.com
©2001–2012EdgeWave.Allrightsreserved.TheEdgeWavelogo,iPrismandiGuardare
trademarksofEdgeWaveInc.Allothertrademarksandregisteredtrademarksarehereby
acknowledged.
MicrosoftandWindowsareeitherregisteredtrademarksortrademarksofMicrosoftCorporationin
theUnitedStatesand/orothercountries.
Otherproductandcompanynamesmentionedhereinmaybethetrademarksoftheirrespective
owners.
TheiPrismsoftwareanditsdocumentationarecopyrightedmaterials.Lawprohibitsmaking
unauthorizedcopies.Nopartofthissoftwareordocumentationmaybereproduced,transmitted,
transcribed,storedinaretrievalsystem,ortranslatedintoanotherlanguagewithoutpriorpermission
ofEdgeWave,Inc.
iPrismAdmin07.110.03
Contents
Chapter 1 Introduction 1
AboutiPrism 1
AboutthisGuide 1
WhoShouldUsethisGuide? 1
Knowledgebase,TutorialsandTechnicalSupport 2
InstallationNotes 2
Chapter 2 Overview 4
HowiPrismWorks 4
TheFilteringDatabase 4
DecidingWhatGetsBlocked 4
AssigningProfiles 7
GettingPastBlockedSites 7
HowiPrismFiltersInternetActivity 8
IntroductiontoProfiles 9
ProxyMode 10
Bridge(Transparent)Mode 11
UsingtheManagementInterface 12
LoggingInandOutofiPrism 13
RestartingandShuttingDowniPrism 14
TheiPrismHomePage 14
Chapter 3 Profiles& Filters 15
CustomFilters 15
AddingaCustomFilter 16
EditingaCustomFilter 18
DeletingaCustomFilter 18
ImportingandExportingCustomFilters 19
Profiles 19
HowiPrismUsesProfiles 20
iPrism’sDefaultProfiles 21
WebProfiles 21
AddingaWebProfile 22
CopyingaProfile 23
DeletingaProfile 24
ApplicationProfiles 24
AddinganApplicationProfile 25
iii
CopyinganApplicationProfile 27
DeletinganApplicationProfile 28
AuthenticationandAssigningProfilestoUsers 28
AssigningProfilestoaSetofIPAddresses(Workstations) 28
QuotasandWarnings 28
EmailAlerts 30
AddinganEmailAlert 31
EditinganEmailAlert 32
DeletinganEmailAlert 33
Quotas 33
AddingaQuota 35
EditingaQuota 37
DeletingaQuota 37
Warnings 38
AddingaWarning 39
EditingaWarning 41
DeletingaWarning 41
AccessControlLists(ACLs) 41
CreatingaNewWebACL 41
CreatingaNewApplicationACL 43
EditinganACL 44
DeletinganACL 44
LockACL 44
CurrentOverrides 46
PendingRequests 47
GrantingRequests 48
DenyingRequests 48
RecentBlocks 49
RemoteFiltering 49
UsingRemoteFiltering 50
EnablingRemoteFiltering 50
Chapter 4 Users& Networks 54
LocalUsers 54
AddingUsers 55
EditingaLocalUser 56
DeletingaLocalUser 57
ImportingUsers 57
ExportingUsers 58
iv
Groups 58
AddingaGroup 59
EditingaGroup 60
DeletingaGroup 60
MappingGroupstoProfiles 60
NestedGroups 61
Privileges 62
Networks 64
AddingaNetworkProfile 65
EditingaNetworkProfile 68
DeletingaNetworkProfile 68
VLANManagement 68
AddingaVLANDescription 69
EditingaVLANDescription 70
DeletingaVLANDescription 70
AdminRoles 71
AddinganAdminRole 72
EditinganAdminRole 75
DeletinganAdminRole 76
Exceptions 76
AddinganException 76
EditinganException 78
DeletinganException 78
RemoteUsers 78
AddingaRemoteUser 80
EditingRemoteUsers 80
DeletingaRemoteUser 81
ImportingRemoteUsers 81
ExportingRemoteUsers 82
RemoteUpgrades 83
Chapter 5 Reporting 86
ReportManager 86
SocialMediaSecurity 86
Chapter 6 Maintenance 87
ApplianceUpdates 87
InstallingaNewHotfix 88
RebootingafterInstallingHotfixes 88
UninstallingaHotfix 88
v
BackupandRestore 89
BackingUp 89
Restoring 90
RestoringYourSystemfromaLocalBackup 90
RestoringiPrismtoitsDefault(Factory)Configuration 90
EventLog 90
DeletingAccessEventRecords 91
PolicyTest 91
SelfCheck 92
SendTestEmail 93
SiteRating&Test 93
SupportTunnel 94
TestDirectoryServices 95
Chapter 7 System Settings 96
CentralManagement 96
CustomizablePages 96
CustomizingPages 97
Authentication,AccessDenied,QuotaNotification,andWarningNotification
Pages 97
CustomizedHTML 97
SpecifiedURL 98
AllOtherPages 99
ReportingLogo 100
CustomizablePageTags 101
DirectoryServices 102
ChoosinganAuthenticationMechanism 103
LocalAuthentication 104
LDAPAuthentication 104
SettinguptheiPrismLDAPClient 104
AuthenticationfromtheUser’sPerspective 106
MicrosoftWindowsActiveDirectoryAuthentication(ActiveDirectory2000/2003) 107
AssigningiPrismProfilestoWindowsADGlobalGroups 108
MicrosoftWindowsActiveDirectoryAuthentication(ActiveDirectory2008) 108
Prerequisites 108
SettingupiPrismtoauthenticateagainstaWindows2008server 109
MigratingfromAD2003toAD2008 112
EnterpriseReporting 112
EventLogging 112
vi
SyslogExport 112
EmailSettings 113
FTPSettings 114
HighAvailability 114
Setup 115
Recovery 117
LicenseKey 118
iPrismCertificates 118
UploadingYourLicenseKey 120
LocalCategories 120
NetworkID 122
NetworkServices 126
NetworkHardening(ProtectingAgainstDoSAttacks) 127
EnablingSNMP 127
TheSNMPCommunityString 127
WCCP 128
ConfiguringWCCPSettingsiniPrism 128
ConfiguringSMTPRelaySettings 129
EnablingtheCo-ManagementNetwork 130
PendingRequestOptions 131
Ports 132
ServicePorts 133
PortTraffic 134
RedirectandHTTPSPorts 134
Proxy 136
SlavingiPrismtoaParentProxy(ProxyMode) 137
EnablinganUpstreamProxyinBridge(transparent)Mode 137
HTML HeaderHandling 138
ConfiguringtheFilterList/SystemUpdateProxyServer 138
SystemPreferences 139
BackupSettings 140
BypassAuthentication 140
CurrentDateandTime 141
FilterFailoverMode 141
SettingorChangingtheSupervisorPassword 142
FilterList(iGuard)Updates 142
SchedulingFilterList(iGuard)Updates 142
CheckingiPrism’sFilterListStatus 142
SystemFailoverMode 143
vii
SystemUpdates 143
ProxyingforExternalUsers 144
ScheduledReboot 144
UnratedPages(iARP) 145
UserSettings 146
Chapter 8 System Status 148
About 148
AdministrationLog 148
ConfigurationSummary 149
Connectivity 149
PingingaHost 150
TracingNetworkActivity 150
PerformaDNSLookup 150
RefreshingtheSystemUpdatesServer 150
RoutingTable 150
SecurityLog 151
Status 151
Chapter 9 Social Networking 153
SocialMediaSettings 153
GeneralSettings 153
SocialMediaSecuritySettings 153
EditActions 154
Sub-actions 155
Blockmessageandstopprocessing 155
Acceptmessageandstopprocessing 156
Sendalert 156
Customizingthealert 156
Substitutiontokens 157
Forwardmessage 161
Attachmessagestamp 162
Customizingthemessagestamp 162
EditRuleset 162
Criteria 164
Textsearch 164
Criteriaparameters 165
Examples 165
Patternmatching 167
Criteriaparameters 167
viii
Senderdetailsmatch 168
Criteriaparameters 168
Recipientdetailsmatch 168
Criteriaparameters 169
ClientIP 169
Criteriaparameters 169
IP addressformats 170
Servicetype 170
Criteriaparameters 170
Applicationtype 171
Criteriaparameters 171
Actiontype 171
Criteriaparameters 171
Attachmentnamematch 172
Criteriaparameters 172
Spamdetection 172
Criteriaparameters 172
Numberofrecipients 174
Criteriaparameters 174
Timeofday 175
Criteriaparameters 175
Profilematch 175
Criteriaparameters 176
Matchall 176
Criteriaparameters 176
Enable/Disable 176
Chapter 10 Central Management 177
BeforeYouBegin 177
SettingUpaMaster/SlaveConfiguration 178
DesignatingSlaveSystems 178
DesignatingtheMasterSystem 179
CentralManagementPolicies 181
ChangingtheMasterSystem 182
RemovingaSlaveSystem 183
UsingStandaloneMode 183
UpgradingiPrismsinaCentralManagementConfiguration 183
Chapter 11 Override Management 185
AccessDeniedPageOptions 185
ix
UsingOverridePrivileges 186
OverridingaBlockedWebSite 186
UsingAccessRequests 188
RequestingAccesstoaSite 188
ManagingOverrideAccess 189
AppendixA Filtering Categories 190
SiteRatingCategories 190
SexCategory 190
Adult 190
Lingerie/Bikini 191
Nudity 191
Pornography 192
Sexuality 192
QuestionableActivitiesCategory 193
CopyrightInfringement 193
ComputerHacking 193
Intolerance/Extremism 194
MiscellaneousQuestionable 194
Profanity 194
Tasteless 195
Weapons/Bombs 195
Violence 196
SecurityExploitsCategory 196
Phishing 196
Spyware/Adware 196
Malware 197
SocietyCategory 197
Alt/NewAge 197
Art/Culture 198
FamilyIssues 198
Government 199
Politics 199
SocialIssues 200
Keywords 200
News 200
Classifieds 200
Religion 201
Cult 201
x