Blog Home  Home Feed your aggregator (RSS 2.0)  
IMFirewall Blog - Thursday, August 05, 2010
Block Internet Access,Block P2P,Web Filtering
 
# Thursday, August 05, 2010
TeamViewer is a computer software package for remote control, desktop sharing, and file transfer between computers. The software operates with Microsoft Windows, Mac OS X, iOS, and Linux. It is possible to access a machine running TeamViewer with a web browser.

With TeamViewer, it will be very convenient for employees to access computers in their homes, transfer files to remote computers. So for security purpose, sometimes you may want to block TeamViewer on your network.

This tutorial will guide you to block TeamViewer with "WFilter Enterprise 3.3".

Because blocking of Teamviewer is not supported by default in WFilter, in this example, we uses "Customize Protocols" feature of WFilter to define TeamViewer protocol.

First, Add "TeamViewer" Protocol.

.
TeamViewer has two patterns:
1. "teamviewer01":
  Type -- "HTTP SEND"
  Format -- "X-IM-URL"
  Content --- "s=.*\&(p|id)=.*\&client=.*"

2. "teamviewer02":
  Type -- "TCP ALL"
  Format -- "0"
  Content -- "^\x17\x24[\x00-\xff]{2}\x00"

Second, Enable blocking of teamViewer in certain blocking levels.



And apply this blocking policy to certain computers.


Now, TeamViewer will be blocked.

WFilter blocking events:



Failure connection of teamViewer.



More information, please check "WFilter Enterprise".
Other related links:
How to block internet downloading?
How to monitor internet usage on company network?
Internet monitoring software for business
How to filter web surfing?
How to block websites and restrict internet access?
Thursday, August 05, 2010 7:32:33 AM (GMT Daylight Time, UTC+01:00)    Content Filter | How to block internet | How to block p2p  |   |  Trackback
# Tuesday, July 27, 2010
Hypertext Transfer Protocol Secure (HTTPS) is a combination of the Hypertext Transfer Protocol with the SSL/TLS protocol to provide encryption and secure (website security testing) identification of the server. It uses port 443. HTTPS connections are often used for payment transactions on the World Wide Web and for sensitive transactions in corporate information systems.
As more and more websites provide both HTTP and HTTPS access. For example, facebook.com can be access both from "http://www.facebook.com" and "https://www.facebook.com". So you can not block facebook completely until both http and https are blocked. However, HTTPS are widely used in payment transactions, web email authentication ..., so block all HTTPS traffic will not be a good choice.

"WFilter Enterprise" provides you a "HTTPS black/white List" for you to filter HTTPS websites by its domain name.

First, enable "HTTPS Black/white List".


Second, add HTTPS domains in the black list.




More information, please check "WFilter Enterprise".
Other related links:
How to block internet downloading?
How to monitor internet usage on company network?
Internet monitoring software for business
How to filter web surfing?
How to block websites and restrict internet access?
How to Block Bittorrent and bitcomet?
How to block msn file transfer?
How to block certain websites to save your productivity?
How to block AIM using WFilter?


Tuesday, July 27, 2010 3:52:02 AM (GMT Daylight Time, UTC+01:00)    Content Filter | How to block websites | How to filter internet access  |   |  Trackback
# Thursday, June 24, 2010
XMPP-based software is deployed on thousands of servers across the Internet and by 2003 was used by over ten million people worldwide, according to the XMPP Standards Foundation.
Because some organizations want to archieve employees chat messagers in their network, from version "en.3.3.174", WFilter added support of recording jabber messages.
However, since the default traffic of XMPP clients is encrypted and compressed, to enable WFilter to monitor chat messages of Jabber client. You need to disable encryption and compression in jabber server settings.

Let's take openfire as an example.

First, disable SSL/TLS in "security settings".


Second, disable compression in "compression settings".



Now, Jabber(XMPP) messages will be recorded in WFilter.






More information, please check "WFilter Enterprise".
Other related links:
How to block internet downloading?
How to monitor internet usage on company network?
Internet monitoring software for business
How to filter web surfing?
How to block websites and restrict internet access?
How to Block Bittorrent and bitcomet?
How to block msn file transfer?
How to block certain websites to save your productivity?
How to block AIM using WFilter?
Thursday, June 24, 2010 3:44:42 AM (GMT Daylight Time, UTC+01:00)     |   |  Trackback
# Tuesday, May 18, 2010
One customer reported that BBC online video can not be blocked by WFilter, even "Block Online HTTP Video and Downloading of Video Files" is checked in certain blocking levels.
So we did some research and found, other than HTTP protocol, the BBC websites also use the RTMP (Real Time Messaging Protocol) to play online video.
Because blocking of RTMP is not supported by default in WFilter(will be added soon), this tutorial will guide you to block BBC online video by the "Customize Protocols" feature of WFilter.

First, Add a new protocol named "RTMP".




1. Protocol Settings:
Protocol Name: RTMP
Protocol Desc: Real Time Messaging
Protocol Type: Streaming

2. Pattern1
Name: RTMP_HTTP
Desc: RTMP_HTTP
Type: HTTP SEND
Offset: 0
Format: User-Agent
Content: Shockwave\sFlash

3. Pattern2
Name: RTMP
Desc: RTMP
Type: TCP_SEND
Offset: 0
Begin Byte: 03
Format: 0
Content: \x03[\x00-\xff]{4}\x80\x00

Second, Enable blocking of RTMP in certain blocking levels.





Now, BBC videos will be successfully blocked.




Related Topic: How to block bbc iplayer?
Tuesday, May 18, 2010 9:06:37 AM (GMT Daylight Time, UTC+01:00)    Block P2P | How to block internet | How to block p2p | How to block websites | How to filter internet access  |   |  Trackback
# Thursday, May 13, 2010
Internet can be a benefit to business when used properly, but internet is often abused by employees and poses significant liability and security risks. Used improperly, the Internet can subject every organization to harassment claims, countless hours of lost productivity and innumerable security leaks and vulnerabilities.

Several important risks caused by improper internet usage:
1. Virus Infection
2. Lost Productivity
3. Legal liability
4. Bandwidth consumer

So it is necessary for you to restrict employees internet access on your network.

To achieve this goal,  first you need an internet access policy, which should be able to:

1. Clarify what constitutes acceptable use of Internet services.
2. Ensure employees understand who to contact with questions regarding acceptable use.
3. Ensure employees understand the penalties that arise from Internet misuse.
4. Help lessen an organization's spyware and virus infestation rates.
5. Provide human resources with signed documentation from each employee stating a pledge not to improperly use Internet services.
6. Help mitigate productivity losses.
7. Decrease dependence upon technology solutions used to enforce employee behavior.
8. Reduce the organization's liability resulting from harassment claims, copyright violations originating onsite and other illegal acts.

You also need an internet filtering product to assure your internet policy. Let's take "WFilter Enterprise" as an example, it enables you to monitor and filter internet access for all computers from a mirroring port of your switch. You only need to install WFilter in one computer to monitor the whole network.

Key Features:

  • Keep a detailed record of each web surfing and web posting.
  • Record all incoming and outgoing email content and attachment.
  • Monitor and archive instance messengers chat contents and activities.
  • Monitor and archive files transferred by web, ftp and IM tools.
  • Implement a policy to filter internet access during working hours.
  • Websites, messengers and p2p file downloading can be blocked to save bandwidth and raise productivity.
  • You only need to install WFilter in ONE computer to manage your whole network.

http://www.imfirewall.us

Thursday, May 13, 2010 4:23:47 AM (GMT Daylight Time, UTC+01:00)    Block P2P | How to block downloading | How to block internet | How to block p2p | How to block websites | How to filter internet access  |   |  Trackback
# Monday, April 26, 2010

Though official Google Talk protocol is XMPP, it is more complicated and flexible than XMPP. Google Talk (GTalk) provides several ways for you to access your gtalk account, including:

  • 1). Official  "Google Talk" client.
  • 2). Gmail chat in google mail account.
  • 3). Google Talk Gadget -- a web version of Gtalk.

This makes it complicated for you to block usage of google talk on company network. This tutorial will guide you to block google talk, gmail chat and google talk gadget using WFilter.

WFilter identifies Google talk connections by signature matching. Blocking google talk is simple in WFilter.

The below examples demonstrates blocking of google talk and gmail chat.

1. Blocking of jabber, gmail chat and gadget

Set a blocking policy in WFilter to block jabber and google talk:

2. Blocked Google talk:




3. Blocked gadget


4. Blocked gmail chat

Monday, April 26, 2010 7:51:07 AM (GMT Daylight Time, UTC+01:00)    Block Messenger | Chat Monitor | How to block internet  |   |  Trackback
Copyright © 2012 IMFirewall Software. All rights reserved.
DasBlog 'Portal' theme by Johnny Hughes.
Pick a theme: