Content Filtering - Cradlepoint IBR350 User Manual

User Manual / IBR350
Upstream Proxy Settings
Enabled: Select whether the use of an Upstream Proxy
server is enabled.
Proxy Address: The Proxy Address is the address the desired
HTTP proxy is hosted at. Addresses can be input as host
names or as ip addresses. If the proxy is unavailable HTTP
traffic will fail to cross the network and a notification page
will be shown.
HTTP Port: The port the HTTP Proxy is listening on.
HTTPS Port (Optional): The port for the proxy to forward
HTTPS traffic to. HTTPS is not transparently intercepted and
must have the LAN clients configured to use the Cradlepoint
router as a proxy for HTTPS to work properly.
MAC WEB FILTER RULES
MAC Address WebFilter Rules allow you to control
access from a specific MAC address to external
domains or websites. To add a rule, click Add.
• MAC Address: Enter MAC Address.
• Filter Action: Select Block or Allow.
• Domain/URL/IP: Enter the Domain Name or
URL (address) of the website you wish to
control access for, e.g. www.google.com. To
make sure the full domain is blocked, enter
the most inclusive domain (e.g. google.com
will effectively block www.google.com as
well as maps.google.com and images.google.
com). Alternatively you can use an IP address,
e.g. 8.8.8.8, or address range written in CIDR
notation, e.g. 8.8.8.0/24.
• Rule Priority: Higher number rules overrule
lower number rules.
• Enabled: A rule can be enabled or disabled by
selecting or deselecting the checkbox.
Use MAC Address WebFilter Defaults together
with MAC Address WebFilter Rules to control website access for specific MAC addresses. By default, each MAC
address is allowed website access. Click Add/Edit to change this setting for a MAC address.

CONTENT FILTERING

WEBFILTER SETTINGS
General Settings
Enbable Webfilter: Selecting "Enable Webfilter" will enable the webfiltering
service. This is used to enable or disable all router-based webfiltering and
forwarding.
Filter HTTPS: Selecting "Filter HTTPS" enables redirection of all port 443 traffic
into the proxy. The proxy will then extract the host name from the SNI (Server
Name Indication). If SNI is unavailable then the original destination IP address is
used for filtering. No decoding of the SSL/TLS session is done.
©2016 Cradlepoint. All Rights Reserved. | +1.855.813.3385 | cradlepoint.com
5/6/16
50