Blog Home  Home Feed your aggregator (RSS 2.0)  
IMFirewall Blog
Block Internet Access,Block P2P,Web Filtering
 
# Tuesday, July 27, 2010
Hypertext Transfer Protocol Secure (HTTPS) is a combination of the Hypertext Transfer Protocol with the SSL/TLS protocol to provide encryption and secure (website security testing) identification of the server. It uses port 443. HTTPS connections are often used for payment transactions on the World Wide Web and for sensitive transactions in corporate information systems.
As more and more websites provide both HTTP and HTTPS access. For example, facebook.com can be access both from "http://www.facebook.com" and "https://www.facebook.com". So you can not block facebook completely until both http and https are blocked. However, HTTPS are widely used in payment transactions, web email authentication ..., so block all HTTPS traffic will not be a good choice.

"WFilter Enterprise" provides you a "HTTPS black/white List" for you to filter HTTPS websites by its domain name.

First, enable "HTTPS Black/white List".


Second, add HTTPS domains in the black list.




More information, please check "WFilter Enterprise".
Other related links:
How to block internet downloading?
How to monitor internet usage on company network?
Internet monitoring software for business
How to filter web surfing?
How to block websites and restrict internet access?
How to Block Bittorrent and bitcomet?
How to block msn file transfer?
How to block certain websites to save your productivity?
How to block AIM using WFilter?


Tuesday, July 27, 2010 2:52:02 AM (GMT Standard Time, UTC+00:00)    Content Filter | How to block websites | How to filter internet access  |   |  Trackback
# Thursday, June 24, 2010
XMPP-based software is deployed on thousands of servers across the Internet and by 2003 was used by over ten million people worldwide, according to the XMPP Standards Foundation.
Because some organizations want to archieve employees chat messagers in their network, from version "en.3.3.174", WFilter added support of recording jabber messages.
However, since the default traffic of XMPP clients is encrypted and compressed, to enable WFilter to monitor chat messages of Jabber client. You need to disable encryption and compression in jabber server settings.

Let's take openfire as an example.

First, disable SSL/TLS in "security settings".


Second, disable compression in "compression settings".



Now, Jabber(XMPP) messages will be recorded in WFilter.






More information, please check "WFilter Enterprise".
Other related links:
How to block internet downloading?
How to monitor internet usage on company network?
Internet monitoring software for business
How to filter web surfing?
How to block websites and restrict internet access?
How to Block Bittorrent and bitcomet?
How to block msn file transfer?
How to block certain websites to save your productivity?
How to block AIM using WFilter?
Thursday, June 24, 2010 2:44:42 AM (GMT Standard Time, UTC+00:00)     |   |  Trackback
# Tuesday, May 18, 2010
One customer reported that BBC online video can not be blocked by WFilter, even "Block Online HTTP Video and Downloading of Video Files" is checked in certain blocking levels.
So we did some research and found, other than HTTP protocol, the BBC websites also use the RTMP (Real Time Messaging Protocol) to play online video.
Because blocking of RTMP is not supported by default in WFilter(will be added soon), this tutorial will guide you to block BBC online video by the "Customize Protocols" feature of WFilter.

First, Add a new protocol named "RTMP".




1. Protocol Settings:
Protocol Name: RTMP
Protocol Desc: Real Time Messaging
Protocol Type: Streaming

2. Pattern1
Name: RTMP_HTTP
Desc: RTMP_HTTP
Type: HTTP SEND
Offset: 0
Format: User-Agent
Content: Shockwave\sFlash

3. Pattern2
Name: RTMP
Desc: RTMP
Type: TCP_SEND
Offset: 0
Begin Byte: 03
Format: 0
Content: \x03[\x00-\xff]{4}\x80\x00

Second, Enable blocking of RTMP in certain blocking levels.





Now, BBC videos will be successfully blocked.




Related Topic: How to block bbc iplayer?
Tuesday, May 18, 2010 8:06:37 AM (GMT Standard Time, UTC+00:00)    Block P2P | How to block internet | How to block p2p | How to block websites | How to filter internet access  |   |  Trackback
# Thursday, May 13, 2010
Internet can be a benefit to business when used properly, but internet is often abused by employees and poses significant liability and security risks. Used improperly, the Internet can subject every organization to harassment claims, countless hours of lost productivity and innumerable security leaks and vulnerabilities.

Several important risks caused by improper internet usage:
1. Virus Infection
2. Lost Productivity
3. Legal liability
4. Bandwidth consumer

So it is necessary for you to restrict employees internet access on your network.

To achieve this goal,  first you need an internet access policy, which should be able to:

1. Clarify what constitutes acceptable use of Internet services.
2. Ensure employees understand who to contact with questions regarding acceptable use.
3. Ensure employees understand the penalties that arise from Internet misuse.
4. Help lessen an organization's spyware and virus infestation rates.
5. Provide human resources with signed documentation from each employee stating a pledge not to improperly use Internet services.
6. Help mitigate productivity losses.
7. Decrease dependence upon technology solutions used to enforce employee behavior.
8. Reduce the organization's liability resulting from harassment claims, copyright violations originating onsite and other illegal acts.

You also need an internet filtering product to assure your internet policy. Let's take "WFilter Enterprise" as an example, it enables you to monitor and filter internet access for all computers from a mirroring port of your switch. You only need to install WFilter in one computer to monitor the whole network.

Key Features:

  • Keep a detailed record of each web surfing and web posting.
  • Record all incoming and outgoing email content and attachment.
  • Monitor and archive instance messengers chat contents and activities.
  • Monitor and archive files transferred by web, ftp and IM tools.
  • Implement a policy to filter internet access during working hours.
  • Websites, messengers and p2p file downloading can be blocked to save bandwidth and raise productivity.
  • You only need to install WFilter in ONE computer to manage your whole network.

http://www.imfirewall.us

Thursday, May 13, 2010 3:23:47 AM (GMT Standard Time, UTC+00:00)    Block P2P | How to block downloading | How to block internet | How to block p2p | How to block websites | How to filter internet access  |   |  Trackback
# Monday, April 26, 2010

Though official Google Talk protocol is XMPP, it is more complicated and flexible than XMPP. Google Talk (GTalk) provides several ways for you to access your gtalk account, including:

  • 1). Official  "Google Talk" client.
  • 2). Gmail chat in google mail account.
  • 3). Google Talk Gadget -- a web version of Gtalk.

This makes it complicated for you to block usage of google talk on company network. This tutorial will guide you to block google talk, gmail chat and google talk gadget using WFilter.

WFilter identifies Google talk connections by signature matching. Blocking google talk is simple in WFilter.

The below examples demonstrates blocking of google talk and gmail chat.

1. Blocking of jabber, gmail chat and gadget

Set a blocking policy in WFilter to block jabber and google talk:

2. Blocked Google talk:




3. Blocked gadget


4. Blocked gmail chat

Monday, April 26, 2010 6:51:07 AM (GMT Standard Time, UTC+00:00)    Block Messenger | Chat Monitor | How to block internet  |   |  Trackback
# Friday, April 16, 2010

Do you notice that your staffs are playing MSN online games during working time? Do you know how to stop them playing games? Here we are talking about how to block MSN games.

 

This tutorial will guide you to block MSN online game with WFilter.

 

1. Open WFilter, choose 'System Settings—>Customize Protocols',set 'Protocol Name,Protocol Desc, Protocol Type, Show it in Blocking Rule' as the picture, then click 'New Pattern'.

2. Input the following words into the textbox. Then click 'Save Settings'.

Name:       MSN Game

Desc:        MSN Game

Type:        HTTP SEND

Begin Byte:  (Leave it as blank.)

Offset:      0
Format:     X-IM-URL
Content:    ^GET\s\/GameBrowser\/GameBrows

3. In 'Control Settings'-->'Blocking Levels'-->'Level Name: Block MSN Game'-->in tab 'Games and stock', check 'Block MSN Game'.

4. In 'User-computer Table', change the Blocking Rules of a certain IP --> 'Save Settings'-->'Apply Changes'.

5.Now let's check whether WFilter works!

Friday, April 16, 2010 8:54:09 AM (GMT Standard Time, UTC+00:00)    Block Messenger  |   |  Trackback
Copyright © 2010 IMFirewall Software. All rights reserved.
DasBlog 'Portal' theme by Johnny Hughes.
Pick a theme: