Content Filtering - Cradlepoint IBR1100 User Manual

User Manual / IBR1100/IBR1150
Upstream Proxy Settings
Enabled: Select whether the use of an Upstream Proxy
server is enabled.
Proxy Address: The Proxy Address is the address the desired
HTTP proxy is hosted at. Addresses can be input as host
names or as ip addresses. If the proxy is unavailable HTTP
traffic will fail to cross the network and a notification page
will be shown.
HTTP Port: The port the HTTP Proxy is listening on.
HTTPS Port (Optional): The port for the proxy to forward
HTTPS traffic to. HTTPS is not transparently intercepted and
must have the LAN clients configured to use the Cradlepoint
router as a proxy for HTTPS to work properly.
MAC WEB FILTER RULES
MAC Address WebFilter Rules allow you to control
access from a specific MAC address to external
domains or websites. To add a rule, click Add.
• MAC Address: Enter MAC Address.
• Filter Action: Select Block or Allow.
• Domain/URL/IP: Enter the Domain Name or
URL (address) of the website you wish to
control access for, e.g. www.google.com. To
make sure the full domain is blocked, enter
the most inclusive domain (e.g. google.com
will effectively block www.google.com as
well as maps.google.com and images.google.
com). Alternatively you can use an IP address,
e.g. 8.8.8.8, or address range written in CIDR
notation, e.g. 8.8.8.0/24.
• Rule Priority: Higher number rules overrule
lower number rules.
• Enabled: A rule can be enabled or disabled by
selecting or deselecting the checkbox.
Use MAC Address WebFilter Defaults together
with MAC Address WebFilter Rules to control website access for specific MAC addresses. By default, each MAC

CONTENT FILTERING

WEBFILTER SETTINGS
General Settings
Enbable Webfilter: Selecting "Enable Webfilter" will enable the
webfiltering service. This is used to enable or disable all router-based
webfiltering and forwarding.
Filter HTTPS: Selecting "Filter HTTPS" enables redirection of all port 443
traffic into the proxy. The proxy will then extract the host name from
the SNI (Server Name Indication). If SNI is unavailable then the original
destination IP address is used for filtering. No decoding of the SSL/TLS
session is done.
©2016 Cradlepoint. All Rights Reserved. | +1.855.813.3385 | cradlepoint.com
7/15/16
84