Download Print this page

8e6 Technologies R3000 User Manual

8e6 Technologies R3000 User Manual

Enterprise filter

Hide thumbs Also See for R3000:

User manual (594 pages)

,

Quick start manual (102 pages)

,

User manual (329 pages)

Table Of Contents

Table of Contents

Advertisement

Quick Links

Download this manual See also: User Manual

R3000

| Enterprise Filter

®

USER

GUIDE

Model: R3000

Release 2.0.12 • Manual Version 1.01

Table of Contents

Advertisement

Table of Contents

Troubleshooting

Need help?

Need help?

Do you have a question about the R3000 and is the answer not in the manual?

Questions and answers

Summary of Contents for 8e6 Technologies R3000

Page 1 R3000 | Enterprise Filter ® USER GUIDE Model: R3000 Release 2.0.12 • Manual Version 1.01...
Page 2 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 3 8e6 Technologies shall not be liable for any error or for incidental or consequential damages in connection with the furnishing, performance, or use of this manual or the exam- ples herein.
Page 4 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 5 ONTENTS ..........1 NTRODUCTORY ECTION R3000 Enterprise Filter ............... 1 About this User Guide ..............1 How to Use this User Guide ............3 Conventions ..................3 Terminology ..................4 Overview ..................9 Environment Requirements ............. 10 Workstation Requirements .............. 10 Network Requirements ..............
Page 6 Block IM for a Specific Entity ........32 Block P2P for a Specific Entity ........33 Chapter 3: Synchronizing Multiple Units ........ 34 R3000 Synchronization ..............34 Synchronization Setup ..............36 Setting up a Source Server ............36 Setting up a Target Server ............36 Types of Synchronization Processes ..........
Page 7 Log Off ..................66 ......67 LOBAL DMINISTRATOR ECTION Introduction ................67 Chapter 1: System screen ............68 Control ..................... 70 Filter window ................71 Local Filtering..............72 Disable Local Filtering Options ........72 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 8 Add a Global Administrator Account ........99 Edit a Global Administrator Account ........99 Delete a Global Administrator Account ......100 Secure Logon ................101 Logon Settings window ............102 Enable, Disable Password Expiration ....... 103 viii , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 9 View the Log of Administrator Changes ..... 126 Alert ....................127 Alert window ................128 Enable the Alert Feature ........... 130 Modify Alert Settings ............130 Disable the Alert Feature ..........130 SMTP Server Settings window ..........131 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 10 Setup window ................. 146 Using Only One R3000 on the Network ......147 Using More than One R3000 on the Network ....147 Set up an R3000 to be a Source Server..... 147 Sync All Target Servers with the Same Settings ..150 Set up an R3000 to be a Target Server......
Page 11 Set up Blocking Criteria ..........190 Reset All Workstations..........191 Lock Page..............191 Overblocking or Underblocking........193 Email Alert................. 194 Set up Email Alert Criteria .......... 195 Set up Email Alert Recipients ........196 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 12 Range to Detect Setup Wizard ........228 Range to Detect Advanced Settings......235 Modify a Segment of the Network ........236 Remove a Segment from the Network ......236 Rules window ................. 237 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 13 Refresh All Main Branches..........272 IP ....................273 Add Group ................274 Add a Master IP Group ............. 274 Refresh ................... 275 Refresh IP Groups ............275 Chapter 3: Library screen ............276 Updates ..................278 xiii , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 14 Method for Weighting Library Categories......302 Weighting Library Categories..........303 NNTP Newsgroup ................. 304 NNTP Newsgroup window ............304 Add a Newsgroup to the Library........305 Remove a Newsgroup from the Library ......305 Category Groups ................306 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 15 View Transfer Activity to the ER ......... 328 Other Device ..............329 Enter or Edit Server Information ......... 329 View Transfer Activity to the Reporting Device... 331 Real Time Probe ................332 Real Time Probe window ............332 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 16 Refresh the Master IP Group, Member ......353 Master IP Group ................354 Group window ................. 355 Change the Group Administrator Password...... 355 Members window ..............356 Add the IP Address of the Member ........357 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 17 Add Individual IP ..............388 Add an Individual IP Member ..........388 Delete Group ................389 Delete a Master IP Group Profile ........389 Paste Sub Group ..............390 Paste a Copied IP Sub Group........... 390 xvii , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 18 Add or Remove URLs or Wildcard URLs ......415 Add a URL to the Library Category......415 Add a Wildcard URL to the Library Category....416 Remove a URL from the Library Category ....417 xviii , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 19 8e6 Taiwan................ 431 Support Procedures ..............432 Product Warranties ..............433 Standard Warranty ................ 433 Technical Support and Service ............. 434 Extended Warranty (optional) ............435 Extended Technical Support and Service ........435 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 20 Emergency Update ..............446 Appendix C ................447 Create a Custom Block Page ............447 Part I: Modify the R3000 ............447 1. Enable block page redirection........447 Option 1: Modify the back end ........447 Option 2: Modify the R3000 console......448 2.
Page 21 ONTENTS Part III: Restart the R3000 ............450 Reference ................451 HTML ................451 CGI written in Perl ............. 453 Embed data in query string......... 453 Use Java Script to post form data....... 454 CGI written in C..............456 Appendix D ................462 Override Pop-up Blockers .............
Page 22 ONTENTS Mobile Server Section ............478 Initial Setup ............... 478 Configure the R3000 to use the Mobile Mode....479 Add MAC Addresses to the Master IP Group ....481 Select MAC Addresses for a Sub Group......482 View Sub Group MAC Addresses ........484 Add a MAC Address to an Individual Member ....
Page 23 Step 3: Replace the failed power supply ....522 Step 4: Contact Technical Support ......522 Fan failure ................. 523 Identify a fan failure ............ 523 Appendix H ................524 Glossary ..................524 ...............531 NDEX xxiii , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 24 ONTENTS xxiv , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 25: I Ntroductory S Ection
R2000 Enterprise Edition and R2000 Authentication Module prod- ucts. As with these applications, the R3000 tracks each user’s online activity, and can be configured to block specific Web sites or service ports, thereby protecting your organi-...
Page 26 • Group Administrator Section - This section includes information for administrators authorized by the global administrator to manage profiles of designated groups and their associated users on the R3000. Group admin- istrators also have rights to access certain library cate- gory functions.
Page 27: How To Use This User Guide
Reporter (ER) application. Appendix G includes informa- tion about RAID maintenance and troubleshooting on an R3000 “H”, “SL”, or “HL” server. Appendix H features a glossary of technical terminology used in this user guide. • Index - This section includes an index of subjects and the first page numbers where they appear in this user guide.
Page 28: Terminology
• field - an area in a dialog box, window, or screen that either accommodates your data , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 29 One or more tree lists also can display in this panel. When an item in the tree list is double- clicked, the tree list opens to reveal items that can be selected. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 30 • screen - a main object of an appli- cation that displays across your monitor. A screen can contain panels, windows, frames, fields, tables, text boxes, list boxes, icons, buttons, and radio buttons. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 31 By clicking the link for a topic, the window for that topic displays in the right panel of the screen, or a menu of sub- topics opens. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 32 Other types of windows include pop-up windows, login windows, or ones from the system such as the Save As or Choose file windows. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 33: Overview
To help you become familiar with the R3000 and how it func- tions on the network, Chapter 1 of this section of the User Guide provides an overview on filtering. Chapter 2 gives insight into Web site access logging, and instant messaging and peer-to-peer setup procedures.
Page 34: Environment Requirements
• Macintosh OS X Version 10.5 running Safari 2.0, Firefox • JavaScript enabled • Java Virtual Machine • Java Plug-in (use the version specified for the R3000 software version) NOTE: R3000 administrators must be set up with software instal- lation privileges in order to install Java used for accessing the interface.
Page 35: Chapter 1: Filtering Operations
HAPTER ILTERING PERATIONS Chapter 1: Filtering Operations Operational Modes Based on the setup of your network, the R3000 can be configured to use one of these operational modes for filtering the network: • invisible mode • router mode • firewall mode...
Page 36: Invisible Mode
ILTERING PERATIONS Invisible Mode If the R3000 is set up in the invisible mode, the unit will filter all connections on the Ethernet between client PCs and the Internet, without stopping each IP packet on the same Ethernet segment. The unit will only intercept a session if an inappropriate request was submitted by a client.
Page 37 (4) is sent to the Internet server. An R3000 set up in the invisible mode can also work in the router mode. Figure 1:1-2 illustrates an example of a monitor mode setup, with the R3000 connected to the managed switching hub.
Page 38: Router Mode
ILTERING PERATIONS Router Mode If the R3000 is set up in the router mode, the unit will act as an Ethernet router, filtering IP packets as they pass from one card to another. While all original packets from client PCs are allowed to pass, if the R3000 determines that a request is inappropriate, a block page is returned to the client to replace the actual requested Web page or service.
Page 39: Firewall Mode
Firewall Mode The firewall mode is a modification of the router mode. With the R3000 set up in this mode, the unit will filter all requests. If the request is appropriate, the original packet will pass unchanged. If the request is inappropriate, the original packet will be blocked from being routed through.
Page 40 Figure 1:1-5 illustrates an example of a firewall mode setup in which requests are always sent to the caching server. In this scenario the R3000 will be affected if the caching proxy server contains unfiltered, “bad” cached pages. 8e6 recom- mends that cached content is cleared or expired after installing the R3000.
Page 41: Group Types
NOTES: If authentication is enabled, the global administrator can also access the NT and LDAP branches of the tree. If multiple R3000 units are set up on the network and the synchro- nization feature is used, an R3000 that is set up to receive profile changes will only display the Global Group type in the tree list.
Page 42: Ip Groups
IP members, override account and time profiles, and maintains filtering profiles of all members in the master IP group. Fig. 1:1-6 IP diagram with a sample master IP group and its members , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 43: Filtering Profile Types
• time profile - used by a sub-group/individual IP group member at a specified time. Other filtering profiles • authentication profile - used by NT and/or LDAP group members NOTE: For information about authentication filtering profiles, see the R3000 Authentication User Guide. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 44: Static Filtering Profiles
IP sub-group and is customized for sub-group members. Individual IP Member Filtering Profile An individual IP member filtering profile is created by the group administrator.This filtering profile applies to a speci- fied end user in a master IP group. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 45: Active Filtering Profiles
Active filtering profiles include the global group profile, over- ride account profile, time profile, and lock profile. NOTE: For information about authentication filtering profiles, see the R3000 Authentication User Guide. Global Filtering Profile The global filtering profile is created by the global adminis- trator.
Page 46: Filtering Profile Components
(default) filtering profile • filter settings - used by service ports, filtering profiles, rules, and the minimum filtering level to indicate whether users should be granted or denied access to specified Internet content , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 47: Library Categories
However, unlike 8e6 supplied categories, a custom cate- gory can be deleted. NOTE: 8e6 cannot provide updates to custom categories. Main- taining the list of URLs and keywords is the responsibility of the global or group administrator. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 48: Service Ports
Service ports are used when setting up filter segments on the network (the range of IP addresses/netmasks to be detected by the R3000), the global (default) filtering profile, and the minimum filtering level. When setting up the range of IP addresses/netmasks to be detected, service ports can be set up to be open (ignored).
Page 49: Filter Settings
• ignore - if the filter segment detected on the network has a service port set up to be ignored, that service port will be bypassed , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 50: Filtering Rules
7. An override account profile takes precedence over an authentication profile. This account may override the minimum filtering level—if the override account was set up in the master IP group tree, and the global adminis- , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 51 8. A lock profile takes precedence over all filtering profiles. This profile is set up under Filter Options, by enabling the X Strikes Blocking feature. Fig. 1:1-7 Sample filtering hierarchy diagram , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 52: Chapter 2: Logging And Blocking
Chapter 2: Logging and Blocking Web Access Logging One of the primary functions of the R3000 is to log the activity of users on the Internet. Information captured in the log can be transferred to a reporting appliance, to be viewed on a PC monitor or output to a printer.
Page 53: Instant Messaging, Peer-To-Peer Blocking
When the IM module is loaded on the server, the R3000 compares packets on the network with IM libraries stored on the R3000 server. If a match is found, the R3000 checks the user’s profile to see whether the user’s connection to the IM service should be blocked, and then performs the appro- priate action.
Page 54: P2P Blocking
When the P2P module is loaded on the server, the R3000 compares packets on the network with the P2P library stored on the R3000 server. If a match is found, the R3000 checks the user’s profile to see whether the user’s connec- tion to the P2P service should be blocked, and then performs the appropriate action.
Page 55: Using Im And P2P
(such as IMGEN, IMGCHAT, IMGTALK, ICQAIM, IMMSN, IMMYSP, and/or IMYAHOO) set up to be blocked • the minimum filtering level profile must have both CHAT and specified individual Instant Messaging library cate- gories set up to be blocked. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 56: Block P2P For All Users
IM traffic with the Range to Detect feature is desired • the minimum filtering level profile should not have IM blocked, unless blocking all IM traffic with the Range to Detect feature is desired. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 57: Block P2P For A Specific Entity
P2P traffic with the Range to Detect feature is desired • the minimum filtering level profile should not have P2P blocked, unless blocking all P2P traffic with the Range to Detect feature is desired. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 58: Chapter 3: Synchronizing Multiple Units
Alone” mode, “Source” mode, or “Target” mode—based on the setup within your organization. In a multi-R3000 server environment, all R3000 units should be set up with the same user profile data, so that no matter which R3000 server a user’s PC accesses on the network, that user’s Internet usage is appropriately filtered and blocked.
Page 59 R3000 appliances on the network. Whenever a filtering configuration change is made on the source R3000 unit, that change is sent to all target R3000 units that have been identified by the source unit via the Synchronization Setup window of the R3000 console. This means that all filtering configuration should be made on the source R3000 unit.
Page 60: Synchronization Setup
This entry identifies the location of each target unit on the network. WARNING: If an R3000 server is set up in the Source mode with a Network Address Translation (NAT) device between the source and target server(s), be sure that ports 26262, 26268, and 88 are open on the source server.
Page 61: Types Of Synchronization Processes
YNCHRONIZING ULTIPLE NITS WARNING: If an R3000 server is set up in the Target mode with a NAT device between the target and source server, be sure that ports 26262 and 26268 are open on the target server. This setup is required so that the target server can communicate with the source server.
Page 62: Library Synchronization Process
Once locally applied on the source server, this update will be placed in a queue for submission to target R3000 servers. The source server will then send the information in the queue to all target servers.
Page 63: Delays In Synchronization
The delay in activating a library change can take a little longer than in activating a filtering profile change. This is due to the fact that the library on the R3000 is loaded into the physical memory. When a change is made to the library, a new library must be loaded into memory with the changes.
Page 64: Synchronized, Non-Synchronized Items
R3000s will read from the source R3000 upon load. These items will then be updated on an as needed basis from the source R3000. For purpose of differentiation, these items will be referred to as functionally synchronized for purposes of this user guide.
Page 65: Synchronize All Items
• Global Group Profile • Override Account: addition/deletion, activation/deactiva- tion • Lock Profiles • IP User/Group and sub-group: additions/deletions, changes, filter changes • NT/LDAP User/Group: additions/deletions, changes, filter changes, profile activation/deactivation • Category Weight System additions/deletions , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 66: Non-Synchronized Items
• Patch application • Synchronization settings • Filter Mode • NIC Configuration • Backup/Restore • Radius Authentication Settings • SNMP configuration • X Strikes Blocking settings • Warn Option Setting • Reporter configuration , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 67: Synchronize Only Library Items
Customization, Warn Page Customization, Profile Control settings • Minimum Filtering Level • Rules • Global Group Profile • Override Account: addition/deletion, activation/deactiva- tion • Lock Profiles • IP User/Group and sub-group: additions/deletions, changes, filter changes , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 68 • Patch application • Synchronization settings • Filter Mode • NIC Configuration • Backup/Restore • Radius Authentication Settings • SNMP configuration • X Strikes Blocking settings • Warn Option Setting • Reporter configuration , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 69: Server Maintenance Procedures
NITS Server Maintenance Procedures Source Server Failure Scenarios In the event that the source R3000 unit should fail, the target servers will continue to run using the last known configura- tion loaded from the source server. However, all dynamic authentication-based profiles will eventually time-out, since the source R3000 server can no longer verify user creden- tials.
Page 70: Use A Backup File To Set Up A Source Server
5. Go to the Reboot window (accessible via System > Control) and reboot the server. 6. Once the R3000 is rebooted, reconnect to the console and access the Backup/Restore window. 7. Upload the last good configuration from the failed source server to the new source server.
Page 71: Set Up A Replacement Target Server
Configure this R3000 so that the IP addresses are that of the target server which became the source server.
Page 72: Chapter 4: Getting Started
IP address on your network. NOTE: If you do not have the R3000 Quick Start Guide, contact 8e6 Technologies immediately to have a copy sent to you. Using the Administrator Console Log On 1.
Page 73 HAPTER ETTING TARTED Fig. 1:4-1 R3000 Introductory Window NOTE: The R3000 Introductory Window must be left open throughout your session. This window displays minimized when the Login dialog box opens. 4. When the Login dialog box opens, enter your Username and Password: Fig.
Page 74 ETTING TARTED NOTE: See Chapter 1: System screen in the Global Administrator Section for information on logging into the R3000 interface if your password has expired. 5. Click OK to close the login dialog box and to access the welcome screen of the Administrator console: Fig.
Page 75: Last Library Update Message
ETTING TARTED Last Library Update message If it has been more than seven days since the R3000 last received updates to library categories, upon logging into the Administrator console a pop-up dialog box opens and displays the following message: ”Libraries were last updated more than 7 days ago.
Page 76 Last Library Update message pop-up box. After the libraries are updated, the welcome screen will appear as in Fig. 1:4:3 with today’s date as the Last Library Update in black text. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 77: Navigation Tips
• Reporting - clicking this button displays the main screen for the Reporting section. The Reporting section contains windows used for configuring reports on users’ Internet activities. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 78 HAPTER ETTING TARTED • Help - clicking this button displays the Help screen. This screen includes navigational tips and a link to the PDF copy of this User Guide: Fig. 1:4-5 Help screen , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 79: Help Features
1. Click a link to go to a specified topic. 2. To view Help Topics for another section, click the tab for that section: System, Group, Library, Reporting, or Help. 3. Click Close Window to close the Help Topics window. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 80: Tooltips
• Hover Display The yellow tooltip box displays when you hover over the icon with your mouse: Fig. 1:4-7 Tooltip mouseover effect To close the tooltip box, move the mouse away from the icon. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 81: Screen And Window Navigation
Screens can contain topic links and sub-topic menus, and/or tree lists with topics and sub-topic menus. Windows can contain tabs that function as sub- windows. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 82: Topic Links
In System, Library, and Reporting screens, the navigation panel contains topic links. By clicking a topic link, the window for that topic displays in the right panel: Fig. 1:4-9 Selected topic and its corresponding window , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 83: Select Sub-Topics
For these topics, clicking a topic link opens a menu of sub-topics: Fig. 1:4-10 Sub-topics menu When a sub-topic from this menu is selected, the window for that sub-topic displays in the right panel of the screen. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 84: Navigate A Tree List
(+) sign, when that branch of the tree is collapsed. By double-clicking the entity, a minus (-) sign replaces the plus sign, and all branches within that branch of the tree display. An item in the tree is selected by clicking it. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 85: Tree List Topics And Sub-Topics
When a tree list topic is selected and clicked, a menu of sub- topics opens: Fig. 1:4-12 Tree list topics and sub-topics Clicking a sub-topic displays the corresponding window in the right panel, or opens a pop-up window or alert box, as appropriate. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 86: Navigate A Window With Tabs
Apply button. NOTE: In the Time Profile and Override Account pop-up windows, entries are saved at the bottom of the window. Fig. 1:4-13 Window with tabs , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 87: Console Tips And Shortcuts
The navigation path displays at the top of each window: Fig. 1:4-14 Navigation path This path reminds you of your location in the console. The entire path shows the screen name, followed by the topic name, and sub-topic name if applicable. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 88: Refresh The Console
Ctrl and C keys on the keyboard. • Paste command Text that was just copied from a field can be pasted into another field that is either blank or populated with text. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 89: Calculate Ip Ranges Without Overlaps
IP Calculator pop-up window displays the IP address, default Netmask in both the Dotted Decimals Notation (e.g. “255.255.255.248”) and CIDR Notation (e.g. “29”) format, Min Host, and Max Host IP addresses. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 90 Fig. 1:4-16 Quit dialog box 2. Click Yes to close the Administrator console. 3. Click the “X” in the upper right corner of the R3000 Intro- ductory Window to close it. WARNING: If you need to turn off the server, see the ShutDown window of the System screen in the Global Administrator Section.
Page 91: G Lobal A Dministrator S Ection
Administrator console. This section is used by the autho- rized global administrator of the R3000 for configuring and maintaining the R3000 server. The global administrator is responsible for integrating the...
Page 92: Chapter 1: System Screen
Control settings, Network settings, Administrator account information, Secure Logon, Diagnostics, Alert contacts, Patch, Synchronization, operation Mode, Authen- tication settings (see the R3000 Authentication User Guide for information about this topic), NIC Mode, Backup/Restore operations, Reset settings, Radius Authentication Settings,...
Page 93 Block Page Authentication, Authentication, Radius Authentication Settings, X Strikes Blocking, and Warn Option Setting. If an R3000 is set up in the Target mode to synchronize only library setting changes, all topics and sub-topics are available.
Page 94: Control
DMINISTRATOR ECTION HAPTER YSTEM SCREEN Control Control includes options for controlling basic R3000 server functions. Click the Control link to view a menu of sub- topics: Filter, Block Page Authentication, ShutDown, and Reboot. Fig. 2:1-2 System screen, Control menu , R3000 E...
Page 95: Filter Window
HTTPS sites on R3000s set up in the Stand Alone or Source mode. In the Service Control frame, enabling Pattern Blocking will log IM and P2P end user activity, and block end users from using clients such as , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 96: Local Filtering
The default setting has Local Filtering “On” and VLAN Detection “Off”. Disable Local Filtering Options If you have multiple R3000 servers on the network, you may wish to disable local filtering on the source server and use the server primarily for authenticating users who log on the network.
Page 97: Enable Local Filtering Options
Disable HTTP Packet Splitting Detection To disable automatic detection of a split HTTP packet, click “Off.” This action removes the field below the radio buttons. NOTE: After making all entries in this window, click Apply. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 98: Https Filtering
Specify your preference for filtering HTTPS sites in the HTTPS Filtering frame. Select from the following settings for the HTTPS Filtering Level: • “None” - if you do not want the R3000 to filter HTTPS sites • “Low” - if you want the R3000 to filter HTTPS sites...
Page 99: Service Control
Or, to block all users from accessing P2P services, the global filtering profile and minimum filtering level must have the “PR2PR” library category set up to be blocked. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 100: Disable Pattern Blocking
Click “Off” to disable Pattern Blocking. NOTE: After making all entries in this window, click Apply. Target(s) Filtering The Target(s) Filtering frame only displays if the R3000 currently being configured is set up in the Source mode for synchronization. The default setting has All Target(s) Filtering “On”.
Page 101: Block Page Authentication Window
The Block Page Authentication window displays when Block Page Authentication is selected from the Control menu. This feature is used for entering criteria the R3000 server will use when validating a user’s account. Information entered/ selected in this window is used by the block page that displays when an end user attempts to access a site or service that is set up to be blocked.
Page 102: Enter, Edit Block Page Options
IP group level. NOTE: Details about the Web-based Authentication option can be found in the R3000 Authentication User Guide. TIP: Multiple options can be selected by clicking each option while pressing the Ctrl key on your keyboard.
Page 103 Logon Script Path field, \\PDCSHARE\scripts displays by default. In this field, enter the path of the logon script that the R3000 will use when re-authenticating users on the network, in the event that a user's machine loses its connection with the server, or if the server is rebooted.
Page 104: Block
• Category field - The name of the library category that blocked the user’s access to the URL displays. If the content the user attempted to access is blocked by an Exception URL, “Exception” displays instead of the library category name. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 105 Support page that explains why access to the site or service may have been denied. • 8e6 Technologies - Clicking this link takes the user to 8e6’s Web site. By default, these links are included in the block page under the following conditions: •...
Page 106: Options
• HELP link • User/Machine frame contents The frame beneath the User/Machine frame includes infor- mation for options (1, 2, and/or 3) based on settings made in this window and the Common Customization window. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 107: Option 2
LOBAL DMINISTRATOR ECTION HAPTER YSTEM SCREEN NOTE: Information about Option 1 is included in the R3000 Authentication User Guide. Option 2 The following phrase/link displays, based on options selected at the Re-authentication Options field: • Re-start your system and re-login - This phrase...
Page 108: Option 3
Profile Control pop-up window. See Appendix D: Override Pop-up Blockers for information on how a user with an override account can authenticate if a pop-up blocker is installed on his/her workstation. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 109: Shutdown Window
Control menu. This window is used for powering off the server. Fig. 2:1-9 ShutDown window Shut Down the Server In the ShutDown frame, click ShutDown to power off the server. To restart the server, the R3000 console needs to be re-accessed. , R3000 E ECHNOLOGIES NTERPRISE...
Page 110: Reboot Window
ECTION HAPTER YSTEM SCREEN Reboot window The Reboot window displays when Reboot is selected from the Control menu. This window is used for reconnecting the server on the network. Fig. 2:1-10 Reboot window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 111: Reboot The Server
Server Status message box, informing you that the server is now disconnected: Fig. 2:1-12 Server Status: disconnect message When the Server Status box closes, the R3000 Enter- prise Filter status message box opens and informs you that the server is rebooting itself, and how much time has elapsed since this process began: Fig.
Page 112 Fig. 2:1-15 Server connected alert box 3. Click OK to close the R3000 ready alert box. 4. Click OK to close the Server connected alert box. 5. You must now re-access the R3000 console.
Page 113: Network
ECTION HAPTER YSTEM SCREEN Network Network includes options for configuring the R3000 server on the network. Click the Network link to view a menu of sub-topics: LAN Settings, NTP Servers, Regional Setting, and Block Page Route Table. Fig. 2:1-16 System screen, Network menu...
Page 114: Lan Settings Window
YSTEM SCREEN LAN Settings window The LAN Settings window displays when LAN Settings is selected from the Network menu. This window is used for configuring network connection settings for the R3000. Fig. 2:1-17 LAN Settings window , R3000 E ECHNOLOGIES...
Page 115: Specify Lan Settings
HAPTER YSTEM SCREEN Specify LAN Settings 1. In the Host Name field, the default host name is R3000. Enter up to 50 alphanumeric characters for the name of the host for this server, such as R3000.LOGO.com. 2. Specify the following information, as necessary: •...
Page 116: Ntp Servers Window
IP addresses of servers running Network Time Protocol (NTP) software. NTP is a time synchronization system for computer clocks throughout the Internet. The R3000 will use the actual time from a clock at a specified IP address. NOTE: The System Time displays beneath the Details frame, using the YYYY/MM/DD HH:MM:SS Coordinated Universal Time (UTC) format for the current time zone.
Page 117: Specify Network Time Protocol Servers
128.59.35.142, 142.3.100.15, and 129.132.98.11. NOTE: Any IP address following the first entry in the Servers list box is only used in the event that the R3000 cannot access the primary time NTP server specified. IP addresses are used in the order in which they display in the list box.
Page 118: Regional Setting Window
The Regional Setting window displays when Regional Setting is selected from the Network menu. This window is used for specifying the time zone to be used by the R3000 and the language set type, if necessary. Fig. 2:1-19 Regional Setting window...
Page 119: Specify The Time Zone, Language Set
R3000. WARNING: If using the R3000 with an 8e6 Technologies Enter- prise Reporter unit, be sure each R3000 used by the ER is set up in the same time zone as the ER. These “like” settings ensure consistency when tracking the logging times of all users on the network.
Page 120: Block Page Route Table Window
Fig. 2:1-20 Block Page Route Table window NOTE: See the Block Page Authentication window for information on setting up block pages. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 121: Add A Router
NOTE: Follow steps 1-4 for each router you wish to include in the routing table. Remove a Router To remove one or more routers from the IP/Mask list box: 1. Select the router(s) from the list box. 2. Click Delete. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 122: Administrator
TIP: The default Username is admin and the Password is user3. 8e6 recommends that you retain this default account in the event that the R3000 unit cannot be accessed. An authorized 8e6 Tech- nologies technical representative may need to use this username and password when troubleshooting the unit.
Page 123: Add A Global Administrator Account
The password is case sensitive. 3. Enter the same password again in the Confirm Pass- word field. 4. Click Modify to apply your settings. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 124: Delete A Global Administrator Account
1: S LOBAL DMINISTRATOR ECTION HAPTER YSTEM SCREEN Delete a Global Administrator Account To delete a global administrator account: 1. Select the username from the Current User list box. 2. Click Delete. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 125: Secure Logon
Secure Logon includes options for setting user passwords to expire after a designated number of days, and/or locking out users from the R3000 after unsuccessfully attempting to log in for the specified number of attempts within the defined timespan. Click the Secure Logon link to view a menu of sub-topics: Logon Settings, and Logon Management.
Page 126: Logon Settings Window
IP address if an incorrect pass- word is entered for a specified number of times within a defined timespan. Fig. 2:1-23 Logon Settings window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 127: Enable, Disable Password Expiration
OK, a different login dialog box opens: Fig. 2:1-24 New password entry This dialog box displays his/her Username and prompts him/her to enter a new password in the Password and Confirm Password fields. Upon clicking OK, the R3000 interface opens. , R3000 E ECHNOLOGIES NTERPRISE...
Page 128: Enable, Disable Account Lockout
Lockout by IP address option(s) enabled— enter the number of times a user can enter an incorrect password during the interval defined in the Failed Password Attempts Timespan (in minutes) [1-1440] field before being locked out of the R3000. , R3000 E ECHNOLOGIES NTERPRISE...
Page 129 Allowable Number of Failed Password Attempts [1-10] field—before being locked out of the R3000. NOTE: If the number of failed attempts is 3 and the number of minutes in the timespan is 10, if any user (one or more) enters an...
Page 130: Logon Management
R3000 interface—and for unlocking usernames and IPs currently locked out of the R3000.
Page 131: View User Account Status, Unlock Username
View User Account Status, Unlock Username View Account Status The All Accounts Status frame displays password statuses of current login accounts set up in this R3000 being config- ured, including the Account Name, Type of account (Admin, Group, Probe, XStrike), Expired Date (either Never Expired...
Page 132: View Locked Ip Address, Unlock Ip Address
TIP: Click No to close the dialog box. 3. Click Yes to display the alert box indicating the IP address was unlocked. 4. Click OK to close the alert box, and to remove the IP address from the list. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 133: Diagnostics
Click the Diagnostics link to view a menu of sub-topics: System Command, View Log File, Troubleshooting Mode, Active Profile Lookup, and Admin Audit Trail. Fig. 2:1-26 System screen, Diagnostics menu , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 134: System Command Window
Command is selected from the Diagnostics menu. This window is used for viewing server statistics and for performing diagnostic tests on the server. Fig. 2:1-27 System Command window WARNING: Diagnostics tools utilize system resources, impacting the R3000’s performance. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 135: Perform A Diagnostic Test, View Data
If “Ping” or “Trace Route” was selected from the pull- down menu, a blank field displays to the right and must be populated. 2. Click Execute to open a pop-up window containing the query results: Fig. 2:1-28 System Command, Results window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 136: Command Selections
Ping The Ping diagnostic tool is used for verifying whether the R3000 can communicate with a machine at a given IP address within the network, and the speed of the network connection. Enter the IP address or host name of the specific Internet address to be contacted (pinged), and then click Execute to display results in the pop-up window.
Page 137: Top Cpu Processes
When Routing Table is selected and Execute is clicked, information about available routes and their statuses displays in the pop-up window. Each route consists of a destination host or network and a gateway to use in forwarding packets. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 138: Current Memory Usage
The Recent Logins diagnostic tool is used for showing infor- mation on administrator login activity. When Execute is clicked, the pop-up window displays a row of data for each time an administrator logged on the R3000 server. , R3000 E ECHNOLOGIES...
Page 139: View Log File Window
The View Log File window displays when View Log File is selected from the Diagnostics menu. This window is used for viewing the most recent log file results of various activi- ties and for troubleshooting. Fig. 2:1-29 View Log File window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 140: View Log Results
NIC card. • “Admin GUI Server Log (AdminGUIServer.log)” - used for viewing information on entries made by the admin- istrator in the R3000 console. NOTE: For information about the “Wbwatch Log (wbwatch.log)”, “Authentication Log (AuthenticationServer.log)”, “eDirectory Agent Debug Log (edirAgent.log)”, “eDirectory Agent Event Log (edirEvent.log)”...
Page 141 1: S LOBAL DMINISTRATOR ECTION HAPTER YSTEM SCREEN Fig. 2:1-30 View Log File, Results window 4. Click the “X” in the upper right corner of the pop-up window to close it. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 142: Troubleshooting Mode Window
Fig. 2:1-31 Troubleshooting Mode window WARNING: This tool utilizes system resources, impacting the R3000’s performance. When you click Enable, the R3000 will stop filtering the network. After you finish making the necessary changes to the server, be sure to click Disable to terminate your Troubleshooting Mode session.
Page 143: Use The Troubleshooting Mode
(TCP); Address Resolution Protocol (ARP); packets destined to a specified port (80, 443, 81); packets destined to the R3000; packets sent to or from port 20 or 21; or packets sent to the Virtual IP address’s port 137 or 139.
Page 144: Active Profile Lookup Window
LOBAL DMINISTRATOR ECTION HAPTER YSTEM SCREEN 8. After performing the fixes on the R3000 server, return to this window and click Disable to resume filtering the network. Active Profile Lookup window The Active Profile Lookup window displays when Active Profile Lookup is selected from the Diagnostics menu. This window is used for verifying whether a user has an active profile.This window also is used for troubleshooting...
Page 145: Verify Whether A Profile Is Active
YSTEM SCREEN NOTE: In order to use this diagnostic tool, IP groups and/or members must be set up in the Group section of the R3000, and each IP group and/or member must have a filtering profile. MAC addresses are used in the mobile mode only.
Page 146 At the bottom of the Rule Details frame, Uncategorized Sites are set to “Pass”, “Warn”, or “Block”, indicating that the selected setting applies to any non-classified URL. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 147 Safe Search Enforcement”, “Search Engine Keyword Filter Control”, and/or “URL Keyword Filter Control” with/without the “Extend URL Keyword Filter Control” option selected. 3. Click the “X” in the upper right corner of the pop-up box to close it. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 148: Admin Audit Trail Window
FTP server. The log of changes made on the server can be viewed in this window. Admin Audit Trail The Admin Audit Trail tab displays by default: Fig. 2:1-34 Admin Audit Trail window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 149: Specify Ftp Criteria
6. Specify whether or not to Send Daily Log to FTP Server by clicking either the “on” or “off” radio button. 7. Click Apply to apply your settings. FTP the Log on Demand Click FTP Now to transfer the log on demand. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 150: View
(Time), IP address of the machine used by the administrator, administrator's User- name, and a brief description of the Action performed on the server. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 151: Alert
Alert includes options for setting up alert emails that notify designated individuals of problems on the network. Click the Alert link to view a menu of sub-topics: Alert Settings, and SMTP Server Settings. Fig. 2:1-36 System screen, Alert menu , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 152: Alert Window
R3000’s self-monitoring process. Fig. 2:1-37 Alert window The following processes are monitored by the R3000: • CPU Processes - If any CPU process fails to run, the R3000 alerts the administrator about the failed process, and that an attempt will be made to reload the necessary process.
Page 153 FTP server. Action should be taken to prevent the hard drive from reaching 100 percent utilization. • Log File Transmission - If the R3000 is unable to send log files as scheduled to an ER server or a third party...
Page 154: Enable The Alert Feature
4. If using an SMTP server for sending alert email messages to designated administrators, enter the email address of the R3000 in the From Email Address field. 5. Click Apply to apply your settings. Modify Alert Settings 1.
Page 155: Smtp Server Settings Window
1. Enter the SMTP Server name, for example: mail.logo.com. 2. By default, the SMTP Server Port number used for sending email is 25. This should be changed if the sending mail connection fails. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 156: Verify Smtp Settings
2. Enter the email address in the pop-up box. 3. Click OK to close the pop-up box and to process your request. If all SMTP Server Settings are accepted, the test email should be received at the specified address. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 157: Patch
ECTION HAPTER YSTEM SCREEN Patch Patch includes options for uploading software updates. Click the Patch link to view a menu of sub-topics: Patch, and Patch Update Log. Fig. 2:1-40 System screen, Patch menu , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 158: Patch Window
Fig. 2:1-41 Patch window NOTE: Available software updates for the R3000 come from downloads made to the server via Traveler, 8e6’s executable program that can run on demand, or be set to run at a scheduled time.
Page 159: Read Information About A Software Update
HAPTER YSTEM SCREEN TIP: Click the link (“here”) at the bottom of the window to go to the Web page at 8e6 Technologies’ public site (http://www.8e6.com/ products/R3000/patches/r3000_patches.htm) where release notes about software updates can be obtained. Read Information about a Software Update...
Page 160: Select And Apply A Software Update
Be sure port 8082 is open on your network. 2. Click Apply to open the software update installation dialog box: Fig. 2:1-43 Software update installation dialog box 3. Click Yes to open the EULA dialog box: Fig. 2:1-44 EULA dialog box , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 161 6. Click OK to close the alert box. 7. In the navigational bar, click Quit to exit the R3000 console, and also close the R3000 Introductory Window. 8. Wait a few minutes, and then log back into the R3000 console again. , R3000 E...
Page 162: Undo An Applied Software Update
To unapply a software update: 1. Go to the History of Patches frame and select the soft- ware update to be unapplied. 2. Click Undo. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 163: Patch Update Log Window
The Patch Update Log window displays when Patch Update Log is selected from the Patch menu. This window is used for viewing the software update log that provides the status on the R3000’s software update activity, including checks for new software updates, and downloaded and applied software updates.
Page 164: Download Log, View, Print Contents
• In the File Download dialog box, click Save: Fig. 2:1-48 Download Log dialog box This action opens the Save As window: Fig. 2:1-49 Save As pop-up window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 165 5. Click OK to close the alert box asking you to verify that the software update log file was successfully saved to your machine. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 166: View The Contents Of The Log
Fig. 2:1-51 Folder containing downloaded file 2. Choose “Open With” and then select a zip file executable program such as “WinZip Executable” to launch that application: Fig. 2:1-52 WinZip Executable program , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 167 3. If using WinZip, click I Agree to open the window containing the zip file: Fig. 2:1-53 WinZip window 4. Right-click the zip file to open the pop-up menu, and choose “View” to open the View dialog box: Fig. 2:1-54 View dialog box , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 168: Save, Print The Log File Contents
• in Windows 2000: Start > Programs > Accessories > Notepad 3. Paste the contents from the clipboard into the Notepad file. The correctly formatted Notepad file can now be saved and/or printed. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 169: Synchronization
Synchronization By default, the Synchronization pop-up menu includes the Setup option that lets you specify the R3000 server’s func- tion on the network: whether it will be a stand alone box, or whether it will send profile/library setting changes to—or receive such setting changes from—another R3000.
Page 170: Setup Window
The Setup window displays when Setup is selected from the Synchronization menu. This window is used for establishing the function of the R3000, especially if there is more than one R3000 on the network. When there are multiple R3000 servers, it is important to set up one as a "source" server and others as "targets,"...
Page 171: Using Only One R3000 On The Network
R3000 (“target”) servers. WARNING: If an R3000 server is set up in the Source mode with a Network Address Translation (NAT) device between the source and target server(s), be sure that ports 26262, 26268, and 88 are open on the source server.
Page 172 3. In the IP to Send frame, select either the LAN 1 or LAN 2 IP address from the IP to Send pull-down menu. This IP address will be used for sending profile/library setting changes to the target server(s). , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 173 4. In the Target IPs frame, enter the Target IP address of the R3000 server that will receive profile/library setting changes from this server being configured. NOTE: If a target server is set up with a NAT device, the NAT IP address must be used instead of the target server’s own IP...
Page 174: Sync All Target Servers With The Same Settings
Two scenarios in which this feature might be used involve restoring backup data to the R3000 server: • In the first scenario, library configurations from a previous date in time are restored to the source server, and each target server needs to have these same library configurations as well.
Page 175: Set Up An R3000 To Be A Target Server
An R3000 configured to be a target server will receive profile/library setting changes from the source server only. WARNING: If an R3000 server is set up in the Target mode with a NAT device between the target and source server, be sure that ports 26262 and 26268 are open on the target server.
Page 176 NOTE: This test only verifies whether this server can contact the source server. In order for synchronization to be operable on the network, the source server must also be able to contact this target server being configured. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 177: Status Window
Fig. 2:1-60 Status window, Source mode If set up in the Target mode, this window is used for verifying that profile/library setting updates are being received from the source server. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 178: View The Sync Status Of Targets From The Source
YSTEM SCREEN View the Sync Status of Targets from the Source If the server is set up in the Source mode, the R3000 System Time displays at the top of the Target(s) Status frame. This is the current date and time from the R3000 server—using the YYYY/MM/DD and HH:MM:SS format—...
Page 179: View Items In The Queue
1. In the Current Queue column for that server, click Details to open the Queue of Target pop-up window: Fig. 2:1-61 Queue of Target pop-up window 2. Click Close to close the pop-up window. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 180: View Items Previously Synced To The Server
Fig. 2:1-62 History of Target pop-up window 4. Click Close to close the pop-up window. Place Items in Queue for Syncing To place new sync items in queue for the target server(s), click Test Sync. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 181: View The Sync Status Of The Target Server
YSTEM SCREEN View the Sync Status of the Target Server If the server is set up in the Target mode, the R3000 System Time displays above the Target Sync Status frame. This is the current date and time from the R3000 server—using the YYYY/MM/DD and HH:MM:SS format—and includes the...
Page 182 • History Log - Click the Details button to open the History of Target pop-up window. See View Items Previ- ously Synced to the Server in this section for information on accessing and viewing the contents of this window. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 183: Mode
ECTION HAPTER YSTEM SCREEN Mode Mode includes options for configuring the R3000 to filter the network. Click the Mode link to view a menu of sub-topics: Operation Mode and Proxy Environment Settings. Fig. 2:1-64 System screen, Mode menu , R3000 E...
Page 184: Operation Mode Window
Mode is selected from the Mode menu. This window is used for specifying the operational mode in which the R3000 will filter the network, and the settings the R3000 will use for “listening to” traffic and sending traffic. Fig. 2:1-65 Operation Mode window...
Page 185: Set The Operation Mode
The default Mode setting is “Invisible”. To change this setting, click the radio button corresponding to “Router”, “Firewall”, or “Mobile”—the latter if this R3000 will only be used for filtering end users who have the 8e6 Mobile Client installed on their workstations.
Page 186: Invisible Option: Specify The Block Page Delivery
• “Send Block to Specified Host MAC Address” - using this preferred method, the block page will always be sent to the MAC address of a specified host, usually the R3000 gateway. Using this option, choose from either of the two Block Page Route To selections: •...
Page 187: Mobile Option: Specify The Mobile Client Control
R3000 to resynchronize the profile on the end user's workstation with the profile set up for him/her on the internal R3000. By default, 60 minutes displays. NOTES: The following features are not available when using the...
Page 188: Proxy Environment Settings Window
Proxy Environment Settings is selected from the Mode menu. This window is used for specifying whether the R3000 is in a proxy environment, and if the default Web server port number 80 will be enabled. Fig. 2:1-66 Proxy Environment Settings window NOTE: Basic Proxy Authentication must be used if using HTTPS in a proxy environment.
Page 189: Use A Local Proxy Server
1. Click the “On” radio button. This selection indicates that the R3000 will perform a reverse lookup on packets to detect the source address and origin of packets. 2. Click Apply to apply your setting.
Page 190: Authentication
DMINISTRATOR ECTION HAPTER YSTEM SCREEN Authentication Authentication includes options for configuring the R3000 to authenticate and re-authenticate users on the network. Click the Authentication link to view a menu of sub-topics: Enable/Disable Authentication, Authentication Settings, and Authentication SSL Certificate. Fig. 2:1-67 System screen, Authentication menu NOTES: Information about these sub-topics can be found in the R3000 Authentication User Guide.
Page 191: Nic Mode
The NIC Mode window displays when NIC Mode is selected from the navigation panel. This window lets you specify the speed for the R3000’s Network Interface Card settings so that the R3000 can communicate with the network switch or hub. Fig. 2:1-68 NIC Mode window By default the NIC mode for LAN1 and LAN2 is set to “Auto”.
Page 192: View The Nic Negotiation
HAPTER YSTEM SCREEN NOTE: The options available in this window depend on the hard- ware components installed for the R3000 unit. View the NIC Negotiation To verify or correct the negotiation for a NIC, click View NIC Negotiation to open a window containing results from the mii-tool and the ethtool about the status of the NIC mode(s): Fig.
Page 193: Modify The Nic Mode Setting
YSTEM SCREEN Modify the NIC Mode Setting WARNING: If changing the NIC mode, be sure the hub/switch to which the R3000 is connected will support the selected NIC mode. An incorrect setting may prevent you from accessing the R3000 console.
Page 194: Nic Mode Speeds Chart
1: S LOBAL DMINISTRATOR ECTION HAPTER YSTEM SCREEN NIC Mode Speeds Chart Below are charts of NIC speeds for various R3000 models: Year 2008 Models LAN1 LAN2 R3000 HL platform 10, 100, 1000 10, 100, 1000 R3000 SL platform 10, 100, 1000...
Page 195: Backup/Restore
Fig. 2:1-70 Backup/Restore window WARNING: A backup should be created and downloaded off the R3000 server whenever a change is made to filtering settings on the R3000 server. , R3000 E ECHNOLOGIES...
Page 196: Backup Procedures
These backup files can be uploaded to a new server, eliminating the need to re- enter the same settings from the old R3000 in the console of the new R3000. NOTE: See Server Maintenance Procedures from the Introduc- tory Section’s Chapter 3: Synchronizing Multiple Units, for an...
Page 197: Perform A Backup
To back up configuration and/or library modifications: 1. In the Backup frame, click the Configuration and/or Library checkbox(es) as appropriate. 2. Click Backup to open the R3000 Backup dialog box: Fig. 2:1-71 R3000 Backup dialog box 3. Type in the Filename for the backup file.
Page 198: Download A File
This action opens the Save As window: Fig. 2:1-73 Save As pop-up window 4. Find the folder in which to save the file, and then click Save to begin downloading the “.gz” file to your worksta- tion. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 199 After the file has completely downloaded, the Download complete dialog box opens: Fig. 2:1-74 Download complete box You can now open this file, open the folder where the file was saved, or close this dialog box. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 200: Perform A Restoration
WARNING: Be sure the file you are restoring uses the same version of the software currently used by the R3000 Administrator console. Refer to the Patch window for available updates to the R3000’s software. (See the Patch window for more information about software updates.)
Page 201: Restore Configurations To The Server
Backup Configurations grid. Restore Configurations to the Server To restore configurations or library modifications from a previous backup: 1. Select the file from the Backup Configurations grid. 2. Click Restore to overwrite the current settings. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 202: Remove A Backup File
The following information displays for each row: the date and time a process was attempted to be executed, and a Message indicating whether that process succeeded or failed. 2. Click OK to close the pop-up box. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 203: Reset
The Reset window displays when Reset is selected from the navigation panel. This window is used for resetting the server back to the default settings when the box was first acquired. Fig. 2:1-78 Reset window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 204: Reset All Server Settings
YSTEM SCREEN WARNING: When Reset is clicked, all settings made on the R3000 server will be removed and the box will be restored to its original state. Any software updates applied to the server subse- quent to receiving this box will need to be reapplied.
Page 205: Radius Authentication Settings
NOTE: The Radius Authentication Settings topic does not display if the synchronization feature is used, and this server being configured is set up in the Target mode to synchronize both profile and library setting changes. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 206: Enable Radius
• Click the radio button corresponding to Host Byte Order to use the byte order stored in the server (big endian or little endian order). NOTE: The byte order should match the setting on the Radius accounting server. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 207: Apply Settings
Radius accounting server. • Check the box for Use R3000 IP as Source IP, if the IP address of the R3000 server (LAN1 or LAN2) should be used when forwarding packets instead of the IP address of the NAS.
Page 208: Disable Radius
1: S LOBAL DMINISTRATOR ECTION HAPTER YSTEM SCREEN Disable Radius To disable the Radius feature: 1. At the Radius Mode field, click the “Off” radio button. 2. Click Apply. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 209: Snmp
This feature lets the global adminis- trator use a third party Simple Network Management Protocol (SNMP) product for monitoring and managing the working status of the R3000's filtering on a network. Fig. 2:1-80 SNMP window The following aspects of the R3000 are monitored by...
Page 210: Enable Snmp
Enter the password to be used as the Community token for public access. This is the password that the manage- ment R3000 console would use when requesting access. Create, Build the Access Control List 1. In the Enter new IP to add field, enter the IP address of an interface from/to which the SNMP should receive/ send data.
Page 211: Hardware Failure Detection
If using an R3000H, HL, or SL unit, the Hardware Failure Detection window displays when Hardware Failure Detec- tion is selected from the navigation panel. This feature shows the status of each drive on the RAID server. Fig. 2:1-81 Hardware Failure Detection window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 212: View The Status Of The Hard Drives
3. Click on the “Rebuild” button on the GUI 4. To return a failed drive to 8e6 or to order additional replacement drives, please call 8e6 Technical Support NOTE: For information on troubleshooting RAID, refer to Appendix G: RAID Maintenance. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 213: X Strikes Blocking
(“X”) number of attempts to such sites. “‘Unacceptable’ Internet sites” pertain to sites included in categories that are blocked in a user’s profile. Fig. 2:1-82 X Strikes Blocking window, Configuration tab , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 214: Configuration
4 seconds. 5. Specify the “Locked” Life Time (Measured in Minutes), which is the number of minutes a user's work- station will be locked. Choose either “Unlimited”, or “Defined”. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 215: Reset All Workstations
• Click Unlock All Locks to remove locks on all locked workstations. Lock Page A user who receives the final strike that locks him/her out the workstation will see the following lock page display on the screen: , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 216 Defined amount of time specified in the “Locked” Life Time field passes, or unless an authorized staff member manually unlocks that user’s workstation (see Go to X Strikes Unlock Workstation GUI in this section). , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 217: Overblocking Or Underblocking
If the configuration settings for this example overblock too many users too frequently: • the time span for the maximum number of strikes may need to be increased • the maximum number of strikes may need to be increased , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 218: Email Alert
• the maximum number of strikes may need to be reduced Email Alert Click the Email Alert tab to display Email Alert: Fig. 2:1-84 X Strikes Blocking window, Email Alert tab , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 219: Set Up Email Alert Criteria
Daily Schedule pop-up window that shows the alert time schedule in the (HH:MM:SS) format: Fig. 2:1-85 The Daily Schedule pop-up window Click Close to close the pop-up window. 3. Click Save to save the field entries. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 220: Set Up Email Alert Recipients
Remove Email Alert Recipients 1. Select the email address(es) from the Current Email Alerts list box. 2. Click Delete to remove the email address(es) from list. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 221: Logon Accounts
Password fields, using eight to 20 characters and at least one alpha character, one numeric character, and one special character. The password is case sensitive. 3. Click Add to include the username in the Current Acces- sible Users list box. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 222: Deactivate An Authorized Logon Account
(See Chapter 4: Reporting screen, Real Time Probe for information on setting up and using real time probes.) , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 223: Categories
2. Click the right arrow (>) to move the selected library cate- gories to the “Strike” Categories list box. TIP: Use the left arrow (<) to move selected “Strike” Categories to the “No Strike” Categories list box. 3. Click Apply to apply your settings. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 224: Go To X Strikes Unlock Workstation Gui
The Re-login window opens if the user’s session needs to be validated: Fig. 2:1-88 Re-login window 1. Enter your Username. 2. Enter your Password. 3. Click OK to close the Re-login window and to re-access the R3000 console. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 225: X Strikes Unlock Workstation
NOTE: An authorized staff member can click a link in an email alert, or type in http://x.x.x.x:88/XStrike.html in the address field of a browser window—in which “x.x.x.x” is the IP address of the R3000—to view locked workstation criteria. Unlock a Workstation To unlock a specified workstation: 1.
Page 226: Set Up An Email Address To Receive Alerts
1. Enter the email address in the Email Address to be Subscribed/Unsubscribed text box. 2. Click Unsubscribe. Close the Pop-up Window Click the “X” in the upper right corner of the pop-up window to close the window. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 227: Warn Option Setting
URL with a Warn setting. Fig. 2:1-90 Warn Option Setting window , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 228: Specify The Interval For Re-Displaying The Warn
1. In the Warn Life Time (minutes) field, by default 10 displays. Enter the number of minutes (1-480) to be used in the interval for re-displaying the warning page for the end user. 2. Click Apply to enable your setting. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 229: Customization
NOTE: All Customization windows display greyed-out if the synchronization feature is used, and this server being configured is set up in the Target mode to synchronize both profile and library setting changes. Fig. 2:1-91 System screen, Customization menu , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 230: Common Customization Window
LOBAL DMINISTRATOR ECTION HAPTER YSTEM SCREEN NOTE: Refer to the R3000 Authentication User Guide for infor- mation on using the Authentication Form Customization window. Common Customization window The Common Customization window displays when Common Customization is selected from the Customization menu.
Page 231: Enable, Disable Features
• Blocked URL Display - if enabled, displays “Blocked URL” followed by the blocked URL in block pages • Copyright Display - if enabled, displays 8e6 R3000 copyright information at the footer of block and lock pages, and the authentication request form •...
Page 232 Enter the global administrator's email address. 2. Click Apply to save your entries. TIP: Click Restore Default to revert to the default settings. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 233: Lock Page Customization Window
X Strikes Blocking feature is enabled. NOTE: See X Strikes Blocking window in this chapter for informa- tion on using the X Strikes Blocking feature. Fig. 2:1-93 Lock Page Customization window , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 234: Edit Entries, Setting
Preview Sample Lock Page 1. Click Preview to launch a separate browser window containing a sample customized lock page, based on entries saved in this window and in the Common Customization window: , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 235 Support page that explains why access to the site or service may have been denied. • 8e6 Technologies - Clicking this link takes the user to 8e6’s Web site. 2. Click the “X” in the upper right corner of the window to close the sample customized lock page.
Page 236: Block Page Customization Window
Common Customization window. Fig. 2:1-95 Block Page Customization window NOTE: See Appendix C: Create a Custom Block Page for infor- mation on creating a customized block page using your own design. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 237: Add, Edit Entries
Preview Sample Block Page 1. Click Preview to launch a separate browser window containing a sample customized block page, based on entries saved in this window and in the Common Customization window: , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 238 By default, the following standard links are included in the block page: • HELP - Clicking this link takes the user to 8e6’s Tech- nical Support page that explains why access to the site or service may have been denied. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 239 DMINISTRATOR ECTION HAPTER YSTEM SCREEN • 8e6 Technologies - Clicking this link takes the user to 8e6’s Web site. By default, these links are included in the block page under the following conditions: • For further options, click here. - This phrase and link...
Page 240: Warn Page Customization Window
Warn setting is applied to any library category or category group. NOTE: See Warn Option Setting window in this chapter for more information about this feature. Fig. 2:1-97 Warn Page Customization window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 241: Add, Edit Entries
Preview Sample Warning Page 1. Click Preview to launch a separate browser window containing a sample customized warning page, based on entries saved in this window and in the Common Customization window: , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 242 By default, the following standard links are included in the warning page: • HELP - Clicking this link takes the user to 8e6’s Tech- nical Support page that explains why access to the site or service may have been denied. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 243 DMINISTRATOR ECTION HAPTER YSTEM SCREEN • 8e6 Technologies - Clicking this link takes the user to 8e6’s Web site. The following buttons are included in the warning page: • Continue - Clicking this button closes the warning page and takes the user to the URL he/she requested.
Page 244: Profile Control Window
Common Customization window, and override accounts are set up for designated end users. NOTE: See Override Account window in the Group section for more information about this feature. Fig. 2:1-99 Profile Control window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 245: Edit Entries
TIP: Click Restore Default to revert to the default settings in this window. NOTE: For a sample profile control pop-up window, see Option 3 from the Options page section of the Block Page Authentication window. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 246: Chapter 2: Group Screen
For the NT and LDAP domain branches, the global adminis- trator must first set up authentication in order to enable the NT/LDAP branch(es). For each domain, the administrator , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 247 Information on creating filtering profiles for IP groups can be found in the Group Administrator Section of this user guide. If using the synchronization feature, if the R3000 server being configured is set up in the Target mode to synchronize both profile and library setting changes, the only branch that displays in the tree is Global Group.
Page 248: Global Group
Filtering Level, and Refresh All. Fig. 2:2-2 Group screen, Global Group menu NOTE: If the synchronization feature is used and this R3000 being configured is set up in the Target mode to synchronize both profile and library setting changes, the only sub-topic that displays is Range to Detect.
Page 249: Range To Detect Window
Detect is selected from the Global Group menu. This window is used for defining segments of network traffic to be detected by the R3000 in the invisible or router mode. Service ports that should be open—ignored by the R3000— are also defined in this window.
Page 250: Add A Segment To The Network
Add a Segment to the Network To add a segment to be detected on the network: 1. Click Add to go to the next page: Fig. 2:2-4 Range to Detect Settings, second window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 251 • Advanced Settings - clicking this button takes you to the Range to Detect Advanced Settings window. Follow the instructions in the Range to Detect Advanced Settings sub-section to complete the addi- tion of the segment on the network. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 252: Range To Detect Setup Wizard
Fig. 2:2-5 Range to Detect Setup Wizard, Step 1 Since the first four pages of the Wizard contain the same fields and buttons, instructions provided for this step are not repeated for Steps 2 - 4. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 253 Remove. 3. Click Next to go to the next page of the Wizard. NOTE: Click Cancel to be given the option to return to the main Range to Detect Settings window. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 254 NOTE: By making entries in Destination IP fields, traffic will be restricted to the range specified in the Source IP and Destination IP frames. This reduces the load on the R3000, thus enabling it to handle more traffic. Fig. 2:2-6 Range to Detect Setup Wizard window, Step 2 NOTE: For Steps 2-6, click Back to return to the previous page of the Wizard.
Page 255 LOBAL DMINISTRATOR ECTION HAPTER ROUP SCREEN Step 3: Optional In this step you define the source IP address(es) to be excluded from filtering. Fig. 2:2-7 Range to Detect Setup Wizard window, Step 3 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 256 NOTE: By making entries in Destination IP fields, traffic will be restricted to the range specified in the Source IP and Destination IP frames. This reduces the load on the R3000, thus enabling it to handle more traffic. Fig. 2:2-8 Range to Detect Setup Wizard window, Step 4...
Page 257 2. Click Add to include the entry in the list box above. NOTE: To remove the port number, select it from the list box and click Remove. 3. Click Next to go to the last page of the Wizard. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 258 • click the Modify button to the right of the list box if you need to make changes. This action takes you to that page of the Wizard where you make your edits. Click Next until you return to Step 6. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 259: Range To Detect Advanced Settings
Click the Advanced Settings button to display the Range to Detect Advanced Settings window: Fig. 2:2-11 Range to Detect Advanced Settings window 1. Enter the settings in the list box, using the correct syntax. Refer to the examples above. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 260: Modify A Segment Of The Network
Remove a Segment from the Network To remove a segment: 1. In the main Range to Detect Settings window (see Fig. 2:2-3), select the segment from the Current Ranges list box. 2. Click Remove. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 261: Rules Window
“Rule4 8e6 CIPA Compliance” (which pertains to the Chil- dren’s Internet Protection Act), and the “Block All” rule. By default, “Rule1” displays in the Rule # field, “BYPASS” displays in the Rule Description field, and Uncategorized Sites are allowed to Pass. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 262 The end user can view the URL after seeing a warning message and agreeing to its terms. • Block - URLs in this category will be blocked. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 263: Modify A Rule
After a rule is added, it can later be modified. To make changes to a rule: 1. Select the rule from the Current Rules pull-down menu. 2. Make your modifications. 3. Click Modify Rule. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 264: Remove A Rule
Current Rules list. Remove a Rule To delete a rule: 1. Select the rule from the Current Rules pull-down menu. 2. Click Delete Rule. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 265: Global Group Profile Window
Category, Port, Default Redirect URL, and Filter Options. Entries in these tabs comprise the profile string for the global group. Fig. 2:2-13 Global Group Profile window, Category tab , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 266: Category Profile
• Warn - URLs in this category will warn the end user that the URL he/she requested can be accessed, but may be against the organization’s policies. The end user can view the URL after seeing a warning message and agreeing to its terms. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 267 2. Click the “Pass”, “Warn”, or “Block” radio button to specify whether all Uncategorized Sites should pass, trigger a warn message for the end user, or be blocked. 3. Click Apply to apply your settings at the global level. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 268: Port
ROUP SCREEN Port Port displays when the Port tab is clicked. This tab is used for blocking access to specified ports for the global filtering profile. Fig. 2:2-14 Global Group Profile window, Port tab , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 269: Create, Edit A List Of Service Ports
3. Click Apply to apply your settings at the global level. To remove a port number from the list box: 1. Select the port number. 2. Click Remove. 3. Click Apply to apply your settings at the global level. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 270: Default Redirect Url
Fig. 2:2-15 Global Group Profile window, Default Redirect URL tab Create, Edit the Redirect URL 1. Specify the type of redirect URL to be used: “Default Block Page”, “Authentication Request Form”, or “Custom URL”. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 271: Filter Options
Filter Options displays when the Filter Options tab is clicked. This tab is used for specifying which filter option(s) will be applied to the global group filtering profile. Fig. 2:2-16 Global Group Profile window, Filter Options tab , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 272: Create, Edit The Filter Options
NOTE: See the X Strikes Blocking window in Chapter 1: System screen for information on setting up the X Strikes Blocking feature. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 273 Google or Yahoo! images returned by the query to load on the page. The user will receive only one strike if all inappropriate images load within the tolerance time range of a given strike. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 274 • 8e6 Supplied Categories - see Chapter 3: Library screen, Search Engine Keywords window in this section. • Custom Categories - see the Group Administrator Section, Chapter 2: Library screen, Search Engine Keywords window. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 275 URLs that are not even within blocked catego- ries. For example, if all URL keywords containing “sex” are blocked, users will not be able to access a non-pornographic site such as http://www.essex.com. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 276: Override Account Window
NT, LDAP, or IP group user to bypass settings at the minimum filtering level. A user with an override account will be able to access categories and service ports blocked at the minimum filtering level. Fig. 2:2-17 Override Account window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 277: Add An Override Account
(See Category Profile, Redirect URL, and Filter Options in this sub-section for information on the Rule, Redirect, and Filter Options tabs.) 6. Click Apply to activate the override account. 7. Click Close to close the pop-up window. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 278: Category Profile
Category Groups tree. TIP: In the Category Groups tree, double-click the group enve- lope to open that segment of the tree and to view library catego- ries belonging to that group. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 279 3. Click the “Pass”, “Warn”, or “Block” radio button to specify whether all Uncategorized Sites should pass, trigger a warn message for the end user, or be blocked. 4. Click Apply to apply your settings to the override account profile. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 280: Redirect Url
Fig. 2:2-19 Override Account pop-up window, Redirect tab 1. Specify the type of redirect URL to be used: “Default Block Page”, “Authentication Request Form”, or “Custom URL”. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 281: Filter Options
Override Account window. Filter Options The Filter Options tab is used for specifying which filter option(s) will be applied to the override account profile. Fig. 2:2-20 Override Account pop-up window, Filter Options tab , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 282 Search engine keywords are entered in the Search Engine Keywords window of 8e6 supplied library categories and custom library categories. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 283 Chapter 2: Library screen, URL Keywords window. 2. Click Apply to apply your settings to the override account profile. 3. Click Close to close the pop-up window and to return to the Override Account window. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 284: Edit An Override Account
3. Click the tab in which to make modifications (Rule, Redi- rect, Filter Options). 4. Make your edits in this tab and in any other tab, if neces- sary. 5. Click Apply. 6. Click Close to close the pop-up window. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 285: Delete An Override Account
2: G LOBAL DMINISTRATOR ECTION HAPTER ROUP SCREEN Delete an Override Account To delete an override account: 1. In the Current Accounts frame, select the username from the list box. 2. Click Remove. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 286: Upload/Download Ip Profile Window
Group menu. This window is used for uploading or down- loading a text file containing filtering profiles of multiple users, groups, or MAC addresses. Fig. 2:2-21 Upload IP Profiles window NOTE: MAC addresses are only used in the mobile mode. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 287: Upload Ip Profiles
“Upload IP Profiles Successfully.” 4. Click the “X” in the upper right corner of the Upload IP Profiles pop-up window to close it. 5. Click Reload Now to reload the new profiles. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 288: Download Profile
Fig. 2:2-23 Download IP Profiles window The contents of this window can viewed, printed, and/or saved. 2. Click the “X” in the upper right corner of the window to close it. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 289: Minimum Filtering Level Window
Category tab is clicked. This tab is used for making selections from the list of 8e6 supplied library categories, and specifying whether each of these selected categories will be opened or blocked at the minimum filtering level. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 290 Pass or Block column. TIP: In the Category Groups tree, double-click the group enve- lope to open that segment of the tree and to view library catego- ries belonging to that group. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 291: Create, Edit Minimum Filtering Categories
Shift key on your keyboard while clicking the last category, and then double- clicking in the appropriate column. 2. Click Apply to apply your settings for the minimum filtering level. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 292: Port
1. Enter the port number in the Port field. 2. Click Add. Each port number you add displays in the Block Port(s) list box. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 293 3. Click Apply to apply your settings at the minimum filtering level. To remove a port number from the list box: 1. Select the port number. 2. Click Remove. 3. Click Apply to apply your settings at the minimum filtering level. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 294: Minimum Filtering Bypass Options
NOTE: See the Override Account window and Exception URL window of the Group screen in the Group Administrator Section of this user guide for information on setting up an override account and exception URLs. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 295: Specify Minimum Filtering Bypass Options
URLs blocked at the minimum filtering level are set up to be accessed by users. 2. Click Save to apply your settings. (See the Exception URL window in the Group Administrator Section for more information.) , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 296: Refresh All
If authentication is enabled, when Refresh All is clicked, the NT and LDAP branches of the tree display. When authenti- cation is disabled, when Refresh All is clicked only the IP branch of the tree displays. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 297 IP includes options for adding a master IP group and to refresh the tree list. Click the IP link to view a menu of sub- topics: Add Group, and Refresh. Fig. 2:2-27 Group screen, IP menu , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 298: Add Group
3. Enter the Password, and re-enter it in the Confirm Password field, using eight to 20 characters and at least one alpha character, one numeric character, and one special character. The password is case sensitive. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 299: Refresh
Group Administrator Section of this user guide. Refresh Refresh IP Groups From the IP group menu, click Refresh whenever changes have been made in this branch of the tree. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 300: Chapter 3: Library Screen
Module, Category Weight System, NNTP Newsgroup, and Category Groups. NOTE: If the synchronization feature is used, an R3000 set up in the Target mode to synchronize both profile and library setting changes will only display the Updates, Library Lookup, Customer Feedback Module, and NNTP Newsgroup topics.
Page 301 8e6 supplied library categories. See Appendix B for information on messages that display in the Library Update Log window. Instant Messaging library categories only include Library Details and URLs sub-topics. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 302: Updates
Click the Updates link to view a menu of sub-topics: Configuration, Manual Update, Addi- tional Language Support, Library Update Log, and Emer- gency Update Log. Fig. 2:3-2 Library screen, Updates menu , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 303: Configuration Window
Configuration window The Configuration window displays when Configuration is selected from the Updates menu. This window is used for making settings to allow the R3000 to receive 8e6 supplied library category updates on a daily basis. Fig. 2:3-3 Configuration window Select the Transfer Protocol 1.
Page 304: Set A Time For Updates To Be Retrieved
Log Level 1 includes a summary of library and software update activity. Log Level 2 includes detailed information on library and soft- ware update activity. 2. Click Apply to apply your settings. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 305: Manual Update Window
This window is used for updating specified 8e6 supplied library categories on demand from the update server, if the R3000 has not received daily updates due to an occurrence such as a power outage. Fig. 2:3-4 Manual Update window NOTE: The Configuration window should be used for scheduling the R3000 to automatically download libraries on a daily basis.
Page 306: Specify The Type Of On Demand Update
• Patch Update - Select this option to download new software updates for the R3000, if available. Any soft- ware updates that are downloaded can be found in the System section of the console, in the Patch window.
Page 307: Additional Language Support Window
1. Make a selection from the Unselected Languages list box and click the right arrow to move that selection to the Selected Languages list box. 2. Once the Selected Languages list box is populated, the (Optional) Select Primary Language pull-down menu , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 308 TIP: To move a language selection back to the Unselected Languages list box, select the item and then click the left arrow. 3. Click Apply to have URLs from the selected language(s) included in the library categories. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 309: Library Update Log Window
The Library Update Log window displays when Library Update Log is selected from the Updates menu. This window is used for viewing transfer activity of library updates from the update server to your R3000, and for downloading the activity log. Fig. 2:3-6 Library Update Log window...
Page 310: View The Library Update Process
Click OK in this box after the download is completed. • In the File Download dialog box, click Save: Fig. 2:3-7 Download Log dialog box This action opens the Save As window: , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 311 NOTE: Proceed to View the Contents of the Log for information on viewing or printing the contents of the log file. 5. Click OK to close the alert box asking you to verify that the log file was successfully saved to your machine. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 312: View The Contents Of The Log
Fig. 2:3-10 Folder containing downloaded file 2. Choose “Open With” and then select a zip file executable program such as “WinZip Executable” to launch that application: Fig. 2:3-11 WinZip Executable program , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 313 “View” to open the View dialog box: Fig. 2:2-13 View dialog box 5. Select “Internal ASCII text viewer”, and then click View to open the View window containing the log file contents: , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 314: Save, Print The Log File Contents
OK to close the dialog box. 2. Open Notepad: • in Windows XP: Start > All Programs > Accessories > Notepad • in Windows 2000: Start > Programs > Accessories > Notepad , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 315 3: L LOBAL DMINISTRATOR ECTION HAPTER IBRARY SCREEN 3. Paste the contents from the clipboard into the Notepad file: Fig. 2:3-15 Notepad The correctly formatted Notepad file can now be saved and/or printed. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 316: Emergency Update Log Window
Update Log is selected from the Updates menu. This window is used for viewing transfer activity of emergency software updates from the update server to your R3000, and for downloading the activity log. Fig. 2:3-16 Emergency Update Log window...
Page 317: View The Emergency Software Update Process
NOTE: See Library Update Log window for information on viewing the contents of the log file, and printing and/or saving the log file contents. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 318: Library Lookup
This window is used for verifying whether a URL or search engine keyword or keyword phrase exists in a library category, and to remove it, if necessary. Fig. 2:3-17 Library Lookup window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 319: Url Lookup, Removal
3. Click OK to close the alert box and to display any results in the Result Category list box, showing the long name of the library category, followed by the URL. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 320: Remove A Url
Once all changes have been made to library windows, click Reload Library to refresh. NOTE: Since reloading the library utilizes system resources that impact the performance of the R3000, 8e6 recommends clicking Reload Library only after modifications to all library windows have been made.
Page 321: Customer Feedback Module
This window is used for enabling the Customer Feed- back Module feature, in which the most frequently visited non-categorized URLs in your R3000's filter log will be FTPed to 8e6 on a daily basis. The URLs collected by 8e6 will be reviewed and added to 8e6's standard library catego- ries, as appropriate, so they can be blocked.
Page 322: Disable Customer Feedback Module
1. At the Customer Feedback Module - Auto Learning Feature field, click “On” to indicate that you wish to enable the Customer Feedback Module. 2. Click Apply to open the Disclaimer dialog box: Fig. 2:3-19 Disclaimer box , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 323 URLs collected by the Customer Feed- back Module and sent to 8e6 Technologies. At no time will any personal information collected be released publicly, nor will the Web request data be used for any...
Page 324 HAPTER IBRARY SCREEN Technologies’ Acceptable Use Policy or other user poli- cies; or to protect 8e6 Technologies and its Customers. “Your agreement to activate the Customer Feedback Module will be transmitted back to 8e6 Technologies once you click the ‘Accept’ button.”...
Page 325: Category Weight System
This feature lets you choose which category will be logged and reported for a URL request that exists in multiple cate- gories (possibly both 8e6 supplied and custom library cate- gories) with the same operational precedence. Fig. 2:3-21 Category Weight System window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 326: View The Current Selections
NOTE: If a URL exists in multiple un-weighted categories of the same operational precedence, the category logged would be the first one returned by the R3000 database. Since there is no precedence given, the order in which the category is returned would be random.
Page 327: Weighting Library Categories
"weight" when ranked against other categories, based upon an end user’s URL request that appears in multiple library categories set up with the same operational precedence in the end user’s filtering profile. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 328: Nntp Newsgroup
The NNTP Newsgroup window displays when NNTP News- group is selected from the navigation panel. This window is used for adding or removing a newsgroup from the libraries. Fig. 2:3-22 NNTP Newsgroup window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 329: Add A Newsgroup To The Library
After all changes have been made to library windows, click Reload Library to refresh. NOTE: Since reloading the library utilizes system resources that impact the performance of the R3000, 8e6 recommends clicking Reload Library only after modifications to all library windows have been made.
Page 330: Category Groups
8e6 supplied library categories. 8e6 supplied library categories are updated regularly with new URLs via Traveler, 8e6’s executable program that supplies updates to the R3000. Category Groups also contains the Custom Categories category group. Customized category groups and library categories must be set up and maintained by global or group administrators.
Page 331 Click the 8e6 supplied category link to view a menu of sub- topics: Library Details, URLs, URL Keywords, and Search Engine Keywords. (Menus for Instant Messaging library categories only include the sub-topics Library Details, and URLs). , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 332: Library Details Window
This window is a view only window. Fig. 2:3-24 Library Details window View Library Details This window displays the Group Name, Description, and Short Name of the 8e6 supplied library category. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 333: Urls Window
URLs ending in “.playboy.com”. A URL is used in a filtering profile for blocking a user’s access to a specified site or service. Fig. 2:3-25 URLs window, Action tab , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 334: View A List Of Urls In The Library Category
2. Make a selection from the pull-down menu for “Addition List”, “Deletion List”, “Wildcard Addition List”, or “Wild- card Deletion List”. 3. Click View List to display the specified items in the Select List list box: Fig. 2:3-26 URLs window, View tab , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 335: Add Or Remove Urls, Reload The Library
Ctrl key on your keyboard. Blocks of URLs can be selected by clicking the first URL, and then pressing the Shift key on your keyboard while clicking the last URL. 4. Click Apply Action. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 336: Add A Wildcard Url To The Library Category
*.cnn.com is added to a category set up to be blocked, the end user will be able to access http://www.cnn.com since it is a direct match, but will not be able to access http://www.sports.cnn.com, since direct URL entries take precedence over wildcard entries. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 337: Remove A Url From The Library Category
After all changes have been made to library windows, click Reload Library to refresh. NOTE: Since reloading the library utilizes system resources that impact the performance of the R3000, 8e6 recommends clicking Reload Library only after modifications to all library windows have been made.
Page 338: Url Keywords Window
URL keywords can be added in this window but URL keyword filtering will not be in effect for the user(s). (See the Filter Options tab in the Group screen section for information about enabling URL keyword filtering.) , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 339: View A List Of Url Keywords
1. Enter the Keyword in the Edit Keyword List frame. 2. Click Add. Remove a URL Keyword from the Library To remove a URL keyword from the library category: 1. Enter the Keyword in the Edit Keyword List frame. 2. Click Remove. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 340: Upload A List Of Url Keywords To The Library
4. Click Upload File to upload this file to the server. NOTE: A URL keyword text file must contain one URL keyword per line. WARNING: The text file uploaded to the server will overwrite the current file. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 341: Upload A List Of Url Keyword Deletions
After all changes have been made to library windows, click Reload to refresh. NOTE: Since reloading the library utilizes system resources that impact the performance of the R3000, 8e6 recommends clicking Reload only after modifications to all library windows have been made.
Page 342: Search Engine Keywords Window
NOTE: Master lists cannot be uploaded to any 8e6 supplied library category. See the Custom Categories sub-section of the Group Administrator Section of this user guide for information on uploading a master list to the server. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 343: View A List Of Search Engine Keywords
Add a Search Engine Keyword to the Library To add a search engine keyword/phrase to the library cate- gory: 1. In the Edit Search Keyword List frame, enter up to 75 alphanumeric characters in the Keyword field. 2. Click Add. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 344: Remove A Search Engine Keyword From The Library
3. Click Upload File to upload this file to the server. NOTE: A search engine keywords text file must contain one keyword/phrase per line. WARNING: The text file uploaded to the server will overwrite the current file. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 345: Upload A List Of Search Engine Keyword Deletions
After all changes have been made to library windows, click Reload to refresh. NOTE: Since reloading the library utilizes system resources that impact the performance of the R3000, 8e6 recommends clicking Reload only after modifications to all library windows have been made.
Page 346: Chapter 4: Reporting Screen
From the navigation panel at the left of the screen, click Report Configuration to display the Report Configuration window, used if the R3000's log files will be transferred to a reporting application. Click Real Time Probe to display windows for configuring and maintaining real time probes.
Page 347 HAPTER EPORTING SCREEN NOTE: Information on configuring the Enterprise Reporter (ER) to work with the R3000 can be found in Appendix F of the Appen- dices Section. WARNING: A version of the Enterprise Reporter prior to 3.0 should not be configured to work with the R3000.
Page 348: Report Configuration
The Report Configuration window displays when Report Configuration is selected from the navigation panel. This window is used if a reporting application needs to be set up to receive logs from the R3000. Fig. 2:4-2 Report Configuration window , R3000 E...
Page 349: Specify The Reporting Device
Specify the Reporting Device By default, no option is selected at the Export field. If R3000 logs will be exported to a reporting application: 1. Click the checkbox corresponding to the reporter to be used for transferring logs: “8e6 Enterprise Reporter”, or “Other Device”.
Page 350: E6 Enterprise Reporter
If “8e6 Enterprise Reporter” was selected, the 8e6 Enter- prise Reporter tab displays by default. On this tab, you need to specify criteria for the ER server that will receive logs from the R3000. Fig. 2:4-3 Report Configuration window, 8e6 ER option, ER tab Edit ER Server Information In the Log File Transfer Configuration frame, by default the IP address 1.2.3.6 displays in the Remote Server list box.
Page 351: Execute Log Transfer Now
To remove an IP address from the list box: 1. Select the IP address. 2. Click Remove. Execute Log Transfer Now In the Initiating Log Transfer frame, click Initiate to transfer the log on demand. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 352: View Transfer Activity To The Er
EPORTING SCREEN View Transfer Activity to the ER After the ER has been configured and logs have been trans- ferred from the R3000 to the ER, you can view transfer activity. Fig. 2:4-4 Report Configuration window, 8e6 ER option, Log tab 1.
Page 353: Other Device
If “Other Device” was selected, the Other Device tab displays by default. On this tab, you need to specify criteria for the reporter that will receive logs from the R3000. Fig. 2:4-5 Report Configuration window, Other Device option and tab...
Page 354 4, 8, 12, 16, 20, 24. 6 = updates occur every six hours, at these intervals of time: 6, 12, 18, 24. 8 = updates occur every eight hours, at these intervals of time: 8, 16, 24. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 355: View Transfer Activity To The Reporting Device
24 = updates occur every 24 hours. 2. Click Save. View Transfer Activity to the Reporting Device After logs have been transferred from the R3000 to the reporting device, the Log tab can be clicked to view transfer activity. On this tab, click View Log to view up to the last 300 lines of transfer activity in the View Log frame.
Page 356: Real Time Probe
Probe is selected from the navigation panel. This feature lets the probe administrator monitor a user's Internet usage in real time to see if that user is using the Internet appropri- ately. Fig. 2:4-6 Real Time Probe window, Configuration tab , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 357: Configuration
Exclude an IP Address from Real Time Probing 1. Enter the Excluded IP Address of a machine to be bypassed from real time probing. 2. Click Add to add the IP address in the Current White list of IPs. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 358: Remove Ips From The White List
EPORTING SCREEN Remove IPs from the White List 1. Select the IP address(es) from the Current White list of IPs list box. 2. Click Delete to remove the IP address(es) from the white list. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 359: Report Recipients
“HTML” is selected. 2. Select the Maximum File Size of an Email Report (MB) that can be sent, from 1MB increments up to 20MB. The default is 5 MB. 3. Click Save. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 360: Set Up Email Addresses To Receive Reports
Remove Email Addresses 1. Select the email address(es) from the Current List of Completed Reports to be Emailed list box. 2. Click Delete to remove the email address(es) from list. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 361: Logon Accounts
Password fields, using eight to 20 characters and at least one alpha character, one numeric character, and one special character. The password is case sensitive. 3. Click Add to include the username in the Current Acces- sible Users list box. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 362: Deactivate An Authorized Logon Account
(See Chapter 1: System screen, X Strikes Blocking for information on reseting strikes and unlocking workstations.) , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 363: Go To Real Time Probe Reports Gui
The Re-login window opens if the user’s session needs to be validated: Fig. 2:4-9 Re-login window 1. Enter your Username. 2. Enter your Password. 3. Click OK to close the Re-login window and to re-access the R3000 console. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 364: Real Time Probe Reports
“x.x.x.x” is the IP address of the R3000—to only see probes he/she created. Create a Real Time Probe Click the Create tab to enter and specify criteria for the report you wish to generate: Fig.
Page 365 This selection generates a report with data for all URLs containing the consecutive characters you specified. In this example, if mail is entered, “http:// www.hotmail.com” and “http://loginnet.passport.com/ login.srf?id=2&svc=mail&cbid=24325&msppjph=1&tw =0&fs=1&fsa=1&fsat=1296000&lc=1033&_lang=EN” would be included in the report. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 366 A probe that is scheduled to run at a specified date and time can be scheduled to run on a daily basis by checking the “Daily” checkbox at the Recurrence field. 6. Enter the Total Run Time in Minutes. 7. Click Apply. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 367: View Real Time Probe Details
Create tab. The Start Date & Time displays in the YYYY/MM/DD HH:MM:SS format. “Daily” displays in the Recurrence column if the probe is scheduled to run on a daily basis. The Status of the probe displays: “Completed”, “In Progress”, or “Scheduled”. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 368 Warned, X Strike); By Method—the method used in creating the entry (SE Keyword, URL Keyword, URL, Wildcard, Strict HTTPS, Filter Action, Pattern, File Type, Moderate HTTPS); Keyword (displays the matching keyword if the method is an , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 369 Display Name; Email Address to Mail the Completed Report; Search Option criteria; Start Date & Time; Run Time; and User ID of the creator of the probe (Created by). Click Close to close this box. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 370 Clicking Email opens the Email Address box: Fig. 2:4-15 Email Address box Enter the Email Address to Mail the Completed Report and click Send to send the completed report to the desig- nated email address. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 371: Shadow Log Format
Log Format is selected from the navigation panel. If the R3000's reporting device is the 8e6 Enterprise Reporter (ER), this window is used for specifying the log format the R3000 will use for sending logs to the ER. Fig. 2:4-16 Shadow Log Format window , R3000 E...
Page 372: Specify The Shadow Log Format
WARNING: When making a selection in this window, be sure to first identify the software versions currently being used by the R3000 and the ER. A correct selection in this window is critical, since the table structure of the ER has changed since software versions 4.0 and 3.50.
Page 373: Post 2.0.10 Log Format Option
Medium and High HTTPS filtering. Post 2.0 log format option If this R3000 currently has the 2.0 or higher software update applied, the Post 2.0 log option should be selected, since the ER 4.1 or higher software update uses the new log structure.
Page 374: G Roup A Dministrator S Ection
URL setup • creates and maintains customized library categories • uses the lookup tool to remove URLs or search engine keywords from customized libraries , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 375: Chapter 1: Group Screen
Group tree. NOTE: If the synchronization feature is used, a server set up in the Target mode to synchronize both profile and library setting changes will not have branches of the tree accessible. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 376 IP sub-groups and/or individual IP members previously set up in the tree list. Click an entity in the tree list to view a menu of topics or actions that can be performed for that entity. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 377: Refresh
ROUP SCREEN Refresh Refresh the Master IP Group, Member Click Refresh whenever a change has been made to the master IP group or member level of the tree. Fig. 3:1-2 Group screen, IP menu , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 378: Master Ip Group
Group Details, Members, Override Account, Group Profile, Exception URL, Time Profile, Upload/Download IP Profile, Add Sub Group, Add Individual IP, Delete Group, and Paste Sub Group. Fig. 3:1-3 Group screen, master IP group menu , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 379: Group Window
In the Group Administrator frame, the Group Name displays. To change the password for this group: 1. Enter the password in the Password and Confirm Pass- word fields, using eight to 20 characters and at least , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 380: Members Window
IP address, and a sub-group may also contain a netmask. For the mobile mode, a member’s MAC address is used for obtaining the end user’s filtering profile. Fig. 3:1-5 Members window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 381: Add The Ip Address Of The Member
3. Click Add to include the MAC address entry in the Current Members list box. Remove a Member from the Group To remove an entry from the Current Members list box: 1. Select the member from the list box. 2. Click Remove. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 382: Override Account Window
A user with an override account will be able to access categories and service ports blocked at the minimum filtering level, if the option to bypass the minimum filtering level is activated. Fig. 3:1-6 Override Account window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 383: Add An Override Account
(See Category Profile, Redirect URL, and Filter Options in this sub-section for information on the Rule, Redirect, and Filter Options tabs.) 6. Click Apply to activate the override account. 7. Click Close to close the pop-up window. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 384: Category Profile
Category Groups tree. TIP: In the Category Groups tree, double-click the group enve- lope to open that segment of the tree and to view library catego- ries belonging to that group. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 385 3. Click the “Pass”, “Warn”, or “Block” radio button to specify whether all Uncategorized Sites should pass, trigger a warn message for the end user, or be blocked. 4. Click Apply to apply your settings to the override account profile. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 386: Redirect Url
Page”, “Authentication Request Form”, or “Custom URL”. If “Custom URL” is selected, enter the redirect URL in the corresponding text box. The user will be redirected to the designated page at this URL instead of the block page. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 387: Filter Options
NOTE: See the X Strikes Blocking window in Chapter 1: System screen of the Global Group Section for information on setting up the X Strikes Blocking feature. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 388 URL keywords are entered in the URL Keywords window of custom library categories. With the “Extend URL Keyword Filter Control” option enabled, a URL keyword search will be extended after the "?" character in a URL. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 389: Edit An Override Account
3. Enter the new Password. 4. Make the same entry again in the Confirm Password field. 5. Click View/Modify to open the pop-up window. 6. Click Apply. 7. Click Close to close the pop-up window. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 390: Modify An Override Account
6. Click Close to close the pop-up window. Delete an Override Account To delete an override account: 1. In the Current Accounts frame, select the username from the list box. 2. Click Remove. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 391: Group Profile Window
Category tab is clicked. This tab is used for assigning filter settings to cate- gory groups/library categories for the group’s filtering profile. Fig. 3:1-10 Group Profile window, Profile tab , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 392: Create, Edit A List Of Selected Categories
2. To change the filter setting for a category group/library category, double-click the column (Pass, Allow, Warn, , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 393 4. Click Apply to apply your settings to the override account profile. 5. Click another tab (Redirect or Filter Options) to continue creating the override account profile, or click Close to close the pop-up window and to return to the Override Account window. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 394: Redirect Url
Fig. 3:1-11 Group Profile window, Redirect URL tab Create, Edit the Redirect URL 1. Specify the type of redirect URL to be used: “Default Block Page”, “Authentication Request Form”, or “Custom URL”. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 395: Filter Options
Filter Options displays when the Filter Options tab is clicked. This tab is used for specifying which filter option(s) will be applied to the group’s filtering profile. Fig. 3:1-12 Group Profile window, Filter Options tab , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 396: Create, Edit The Filter Options
Google or Yahoo! images returned by the query to load on the page. The user will receive only one strike if all inappropriate images load within the tolerance time range of a given strike. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 397 URL keyword search will be extended after the "?" character in a URL. NOTE: To set up URL keywords in a URL Keywords window for Custom Categories, see Chapter 2: Library screen, URL Keywords window. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 398: Exception Url Window
This window is used for blocking group members’ access to specified URLs and/or for letting group members access specified URLs blocked at the minimum filtering level. Fig. 3:1-13 Exception URL window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 399: Block Url Frame
To block the group’s access to the URL again: 1. Select the URL from the ByPass URLs list box. 2. Click Remove. Apply Settings Click Apply to apply your settings after adding or removing a URL. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 400: Time Profile Window
The Time Profile window displays when Time Profile is selected from the group menu. This window is used for setting up or modifying a filtering profile to be activated at a specified time. Fig. 3:1-14 Time Profile window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 401: Add A Time Profile
Rule, Redirect, Filter Options, and Excep- tion tabs.) 4. Click Apply to activate the time profile for the IP group at the specified time. 5. Click Close to close the pop-up window. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 402: Category Profile
Fig. 3:1-15 Time Profile pop-up window, Rule tab NOTE: See the Override Account window, Category Profile sub- section in this chapter for information about entries that can be made for this component of the filtering profile. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 403: Redirect Url
Fig. 3:1-16 Time Profile pop-up window, Redirect URL tab NOTE: See the Override Account window, Redirect URL sub- section in this chapter for information about entries that can be made for this component of the filtering profile. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 404: Filter Options
Fig. 3:1-17 Time Profile pop-up window, Filter Options tab NOTE: See the Override Account window, Filter Options sub- section in this chapter for information about entries that can be made for this component of the filtering profile. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 405: Exception Url
Minimum Filtering Bypass Options tab. (See the Override Account window in this section for informa- tion on setting up an override account to allow a user to bypass group settings and minimum filtering level settings, if allowed.) , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 406 2. Click Add to include the URL in the ByPass URLs list box. To block the group’s access to the URL again: 1. Select the URL from the ByPass URLs list box. 2. Click Remove. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 407: Modify A Time Profile
5. Click Apply. 6. Click Close to close the pop-up window. Delete a Time Profile To delete a time profile: 1. Select the time range from the Current Time Profiles list box. 2. Click Remove. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 408: Upload/Download Ip Profile Window
Upload/Download IP Profile is selected from the group menu. This window is used for uploading or downloading a text file containing filtering profiles of multiple users or sub- groups. Fig. 3:1-19 Upload/Download IP Profile window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 409: Upload Ip Profiles
4. Click the “X” in the upper right corner of the Upload IP Profiles pop-up window to close it. 5. Click OK in the message dialog box to refresh the IP groups branch of the tree. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 410: Download Profile
Fig. 3:1-21 Download IP Profiles window The contents of this window can viewed, printed, and/or saved. 2. Click the “X” in the upper right corner of the window to close it. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 411: Add Sub Group
(percent sign), "<" (less than symbol), “>” (greater than symbol), "+" (plus symbol), "-" (minus sign), "=" (equals sign). 3. Click OK to close the dialog box and to add the sub- group to the master IP group tree. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 412: Add Individual Ip
"{" (left brace), "}" (right brace), "[" (left bracket), "]" (right bracket), "@" (at sign), "#" (pound sign), "$" (dollar sign), "%" (percent sign), "<" (less than symbol), “>” (greater than symbol), "+" (plus symbol), "-" (minus sign), "=" (equals sign). , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 413: Delete Group
The minimum filtering level is established by the global administrator. Delete Group Delete a Master IP Group Profile To delete a group profile, choose Delete Group from the group menu. This action removes the master IP group from the tree. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 414: Paste Sub Group
Fig. 3:1-24 Paste Sub Group dialog box 2. In the Input sub group name field, enter the name of the sub-group. 3. Click OK to add the sub-group to the group tree. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 415: Sub Group
Click the sub-group’s link to view a menu of sub-topics: Sub Group Details, Members, Sub Group Profile, Exception URL, Time Profile, Delete Sub Group, and Copy Sub Group. Fig. 3:1-25 Group screen, Sub Group menu , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 416: Sub Group (Ip Group) Window
Group Details is selected from the menu. This window is used for viewing and adding or editing details on an IP group member. , view only Fig. 3:1-26 Sub Group (IP Group) window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 417: View Ip Sub-Group Details
Add IP Sub-Group Details If the sub-group was not previously defined, the fields in the IP Address frame and the Apply button remain activated. , fields activated Fig. 3:1-27 Sub Group (IP Group) window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 418 • enter the IP address range in the text boxes. 3. Click Apply to save your entries. Once applied, the Member fields become greyed-out and the Apply button becomes deactivated (see Fig. 3:1-26). , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 419: Members Window
This window is used for modifying the sub- group’s Member IP address, if using the invisible or router mode. If using the mobile mode, MAC address(es) can be selected for inclusion in the sub-group. Fig. 3:1-28 Members window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 420: Modify Sub-Group Members
MAC address, and then pressing the Shift key on your keyboard while clicking the last MAC address, and then clicking the arrow key pointing to that list box. 3. Click Modify to apply your settings. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 421: Sub Group Profile Window
NOTE: See the Time Profile window in the group tree section of this chapter for information on entries that can be made for the following components of the filtering profile: Category Profile, Redirect URL, Filter Options, Exception URL. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 422: Delete Sub Group
2. Select the group from the tree and choose Paste Sub Group from the group menu to paste the sub-group to the group. (See Paste Sub Group dialog box in the Group section of this chapter.) , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 423: Individual Ip
Individual IP member. Click the individual IP member’s link to view a menu of sub-topics: Members, Individual IP Profile, Exception URL, Time Profile, Delete Individual IP. Fig. 3:1-29 Group screen, Individual IP menu , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 424: Member Window
Enter the IP Address of the Member In the Modify Individual Group Member frame: 1. Enter the IP address in the Member field. 2. If using the mobile mode, select the member’s MAC Address from the pull-down menu. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 425: Individual Ip Profile Window
NOTE: See the Time Profile window in the group tree section of this chapter for information on entries that can be made for the following components of the filtering profile: Category Profile, Redirect URL, Filter Options, Exception URL. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 426: Delete Individual Ip
ROUP SCREEN Delete Individual IP Delete an Individual IP Member To delete an individual IP member, choose Delete Individual IP from the individual IP member menu. This action removes the member from the tree. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 427: Chapter 2: Library Screen
Library Lookup and Category Groups, the latter topic containing the Custom Categories sub-topic. NOTE: If the synchronization feature is used, a server set up in the Target mode will only have the Library Lookup topic available. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 428: Library Lookup
Fig. 3:2-2 Library Lookup window NOTE: This window is also used by global administrators, except their permissions let them remove URLs and search engine keywords/phrases. The reload library function is used after making changes to the library. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 429 3. Click OK to close the alert box and to display any results in the Result Category list box, showing the long name of the library category, followed by the URL. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 430: Look Up A Search Engine Keyword
Search Engine Keyword or keyword phrase, up to 75 alphanumeric characters. 2. Click Lookup to display results in the Result Category list box, showing the long name of all categories that contain the search engine keyword/phrase. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 431: Custom Categories
Maintaining the list of URLs and keywords is the responsibility of the global or group administrator. WARNING: The maximum number of categories that can be saved is 250. This figure includes both 8e6 supplied categories and custom categories. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 432: Add Category
Upon saving this entry, the long name displays in the tree list. For group administrators adding a new custom category, the group name displays in paren- theses after the long name. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 433: Refresh
NOTE: The category must have URLs, URL keywords, and/or search keywords added to its profile in order for it to be effective. Refresh Refresh the Library Click Refresh after uploading a file to a customized library category. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 434: Custom Library Category
Fig. 3:2-5 Library screen, custom library category menu NOTE: Since custom categories are not created by 8e6, updates cannot be provided. Maintaining the list of URLs and keywords is the responsibility of the global or group administrator. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 435: Library Details Window
This window is used for editing the long name of the custom library category, and for viewing name criteria previously entered. Fig. 3:2-6 Library Details window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 436: View, Edit Library Details
Group Name and library category Short Name. 1. The long Description name displays and can be edited. 2. After modifying the description for the library category, click Apply to save your entry. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 437: Urls Window
URLs ending in “.playboy.com”. A URL is used in a filtering profile for blocking a user’s access to a specified site or service. Fig. 3:2-7 URLs window, Action tab , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 438: View A List Of Urls In The Library Category
2. Make a selection from the pull-down menu for “Master List”, or “Wild Card Master List”. 3. Click View List to display the specified items in the Select List list box: Fig. 3:2-8 URLs window, View tab , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 439: Add Or Remove Urls Or Wildcard Urls
Ctrl key on your keyboard. Blocks of URLs can be selected by clicking the first URL, and then pressing the Shift key on your keyboard while clicking the last URL. 4. Click Apply Action. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 440: Add A Wildcard Url To The Library Category
*.cnn.com is added to a category set up to be blocked, the end user will be able to access http://www.cnn.com since it is a direct match, but will not be able to access http://www.sports.cnn.com, since direct URL entries take precedence over wildcard entries. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 441: Remove A Url From The Library Category
Card URL List frame, as pertinent. 3. Click Remove to display the associated URLs in the list box below. 4. Select the URL(s) that you wish to remove from the cate- gory. 5. Click Apply Action. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 442: Upload A Master List To The Library
TIP: A URL text file must contain one URL per line. WARNING: The text file uploaded to the server will overwrite the current file. NOTE: Before the file is uploaded to the server, it will first be vali- dated , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 443 Go to the IP Lookup Options section and click the radio button corresponding to the option to be used when uploading the file: • “Upload the file with IP Lookup” - If this option is , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 444: Upload A Master List Of Wildcard Urls
1. Click Upload Wildcard Master to open the Upload Custom Library WildCard URL pop-up window: Fig. 3:2-11 Upload Custom Library WildCard URL window 2. Click Browse to open the Choose file pop-up window. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 445 5. If the file contains invalid wildcard URLs, click Back to return to the Upload WildCard URL window. Another attempt to validate the file can be made after corrections have been made to the file. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 446: Reload The Library
After all changes have been made to library windows, click Reload Library to refresh. NOTE: Since reloading the library utilizes system resources that impact the performance of the R3000, 8e6 recommends clicking Reload Library only after modifications to all library windows have been made.
Page 447: Url Keywords Window
URL keywords can be added in this window but URL keyword filtering will not be in effect for the user(s). (See the Filter Options tab in the Group screen section for information about enabling URL keyword filtering.) , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 448: View A List Of Url Keywords
1. Enter the Keyword in the Edit Keyword List frame. 2. Click Add. Remove a URL Keyword from the Library To remove a URL keyword from the library category: 1. Enter the Keyword. 2. Click Remove. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 449: Upload A List Of Url Keywords To The Library
After all changes have been made to library windows, in the Reload URL Keywords frame, click Reload to refresh. NOTE: Since reloading the library utilizes system resources that impact the performance of the R3000, 8e6 recommends clicking Reload only after modifications to all library windows have been made.
Page 450: Search Engine Keywords Window
A library category uses search engine keywords to block searches on subjects containing keywords included in its list. Fig. 3:2-15 Search Engine Keywords window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 451: View A List Of Search Engine Keywords
To add a search engine keyword or keyword phrase to the library category: 1. In the Edit Search Keyword List frame, enter up to 75 alphanumeric characters in the Keyword field. 2. Click Add. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 452: Remove A Search Engine Keyword
After all changes have been made to library windows, in the Reload Search Keywords frame, click Reload to refresh. NOTE: Since reloading the library utilizes system resources that impact the performance of the R3000, 8e6 recommends clicking Reload only after modifications to all library windows have been made.
Page 453: Delete Category
IBRARY SCREEN Delete Category Delete a Custom Category To delete a custom library category, choose Delete Cate- gory from the menu. This action removes the library cate- gory from the Custom Categories list. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 454: Technical Support
ECHNICAL UPPORT RODUCT ARRANTIES Technical Support For technical support, visit 8e6 Technologies’s Technical Support Web page at http://www.8e6.com/support.html, or contact us by phone, by email, or in writing. Hours Regular office hours are from Monday through Friday, 8 a.m. to 5 p.m. PST.
Page 455: Office Locations And Phone Numbers
Orange, CA 92865-4232 Local 714.282.6111 714.282.6116 Domestic US 1.888.786.7999 International +1.714.282.6111 8e6 Taiwan 7 Fl., No. 1, Sec. 2, Ren-Ai Rd. Taipei 10055 Taiwan, R.O.C. Taipei Local 2397-0300 2397-0306 Domestic Taiwan : 02-2397-0300 International 886-2-2397-0300 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 456: Support Procedures
• Your trouble ticket will not be closed until your permission is confirmed. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 457: Product Warranties
ARRANTIES Product Warranties Standard Warranty 8e6 Technologies warrants the medium on which the 8e6 product is provided to be free from defects in material and workmanship under normal use for period of one year (the “Warranty Period”) from the date of delivery. This standard Warranty Period applies to both new and refurbished equip- ment for a period of one year from the delivery date.
Page 458: Technical Support And Service
RODUCT ARRANTIES Technical Support and Service 8e6 Technologies will provide initial installation support and technical support for up to 90 days following installation. 8e6 Technologies provides after-hour emergency support to 8e6 server customers. An after hours technician can be reached by voice line.
Page 459: Extended Warranty (Optional)
If parts are discontinued from production during the Warranty Period, immediate replacement product(s) or hardware parts will be available for exchange with defective parts from 8e6 Technologies’ local reseller or distributor. Extended Technical Support and Service Extended technical support is available to customers under a Technical Support Agreement.
Page 460: A Ppendices S Ection
• Port command codes: Filter all ports Filter the defined port number(s) Open all ports Open the defined port number(s) Set the defined port number(s) to trigger a warn message Block all ports , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 461 PASSED = When positioned at the end of a string of categories or after a category command code, this code indicates that unidentified categories will follow suit with categories defined by that code: J (pass), R (block), or M (receive warning message). , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 462: Category Codes
To disable all filter codes for an IP profile, enter 0x1 at the end of the profile string. See http://www.8e6.com/r3000help/files/ 2group_ipprofiles.html for examples of filtering profile entries. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 463: Appendix B
Your R3000 receives 8e6 supplied library category updates and software updates via Traveler, 8e6’s executable program for updating the R3000 server. You can run Trav- eler on demand via the Manual Update to 8e6 Supplied Categories window, or schedule Traveler to launch at a specified time via the Configuration window.
Page 464: General Activity
• Create tmp file. • getpid(). • Write pid to tmp file. • Traveler failed to create the tmp file: <ServerConstants.TRAVELER_TEMP> • Temp file deleted. • Fail to rename <szFileUrlTemp> to final <szFileUrl> , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 465: Library Download Process
• FTP error <FTP reply code> • Could not write history file! (exception) • Could not read emergency date from: <emergency update file>. • Failed to download <filename> (Exception) • Finished updating libraries! , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 466: Customer Feedback Module Option
• PrintstackTrace - Fail to back up file for <FileUrl> • PrintStackTrace - <java error message> • PrintstackTrace - Fail to back up file for <category>.sew • PrintstackTrace - Fail to copy file for merging , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 467: Error Messages
• Reloading library encounters an exception • Send alert encountered an exception • Traveler exits after reaching time limit: <time limit> mins • Log file could not be set. (Exception) • List could not be read from file. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 468: Weekly Update (7 Days Library)
• Was not a primary language deletion file. • Failed to sort the library files. • Failed to merge files for <category> • File is the most current version. • Successfully updated. • Checksum verification failed. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 469: Full Url Library Update (Urls, Url Keywords)
• Failed to download <pattern> • IM and P2P Update has successfully completed. Newsgroup Library Update (News) • Download newsgroup: • Successfully downloaded newslist • Failed to download newslist • Newsgroup Library Update has successfully completed. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 470: Search Engine Keywords Library Update
• Successfully processed <patch> • Failed to download <patch> • Patch Update has completed. Emergency Update • Emergency update: • Could not read emergency date from: <emergency update file>. • Emergency Update has completed. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 471: Appendix C
Block page, not the Options page. Part I: Modify the R3000 1. Enable block page redirection Select either of the following options to modify the R3000. Option 1 lets you modify the back end, and Option 2 lets you modify the R3000 console.
Page 472: Option 2: Modify The R3000 Console
(e.g. “_”), if such characters are used in the URL a modified name must be used instead for the <blockpage>. As a result, the R3000 will redirect the block page to the customized one with the following link format: http://<server for block_page>[:<port for block page>]/ <blockpage>?URL=<blocked url>&IP=<client...
Page 473: Part Ii: Customize The Block
Blocked URL: From the query string of the block page URL IP that accessed the blocked URL: (see URL) Category of the blocked URL: (see URL) USER User Name that accessed the blocked URL: (see URL) , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 474: Implement The "Further Option" (Optional)
3. CGI written in C See the Reference portion of this appendix for coding details. NOTE: Don’t forget to replace <R3000 IP> with the real IP in the HTML/CGI before using these samples. Part III: Restart the R3000 You must restart the R3000 to make your changes effective.
Page 475: Reference
PPENDICES ECTION PPENDIX Reference HTML     <html> <head> <script language=javascript> function parseData(str, start, end) result = "";...
Page 476 <input type=hidden name="URL" value=""> <input type=hidden name="IP" value=""> <input type=hidden name="CAT" value=""> <input type=hidden name="USER" value=""> <input type=hidden name="STEP" value="STEP2"> </form> <br>R3000 Customized Block Page (HTML using Java Script to parse and post form data)<br> <script language=javascript> getData(); showData(); </script>...
Page 477: Cgi Written In Perl
# File Type: # Description: Sample Perl script for R3000 customized block page # Replace the <R3000 IP> with the real IP before using. # This script provide data to the options CGI through query string # Revision: # Date: 03/08/2004 $method = $ENV{'REQUEST_METHOD'};...
Page 478: Use Java Script To Post Form Data
# File Type: # Description: Sample Perl script for R3000 customized block page # Replace the <R3000 IP> with the real IP before using. # This script uses Java Script to post form data to # options CGI # Revision: # Date: 03/08/2004 $method = $ENV{'REQUEST_METHOD'};...
Page 479 "<input type=hidden name=\"URL\" value=\"$url\">\n"; print "<input type=hidden name=\"CAT\" value=\"$cat\">\n"; print "<input type=hidden name=\"USER\" value=\"$user\">\n"; print "<input type=hidden name=\"STEP\" value=\"STEP2\">\n"; print "<br>R3000 Customized Block Page (CGI written with Perl using Java Script to post form data)<br>\n"; print "URL: $url<br>\n"; print "IP: $ip<br>\n";...
Page 480: Cgi Written In C
PPENDIX CGI written in C * cusc_block.c * Description: sample C source code of CGI for customized block page * Replace <R3000 IP> with real IP and recompile before using * Revision: 1 * Date: 03/08/2004 #include <stdio.h> struct { char *name;...
Page 481 (strcmp(entries[index].name, "IP") == 0) strcpy(szIP, entries[index].val); else if (strcmp(entries[index].name, "URL") == 0) strcpy(szURL, entries[index].val); else if (strcmp(entries[index].name, "CAT") == 0) strcpy(szCategory, entries[index].val); else if (strcmp(entries[index].name, "USER") == 0) strcpy(szUserName, entries[index].val); printhtml(); void printhtml() , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 482 Customized Block Page (CGI written with C using Java Script to post form data)<br>\n"); printf("URL: %s<br>\n", szURL); printf("IP: %s<br>\n", szIP); printf("CAT: %s<br>\n", szCategory); printf("USER: %s<br>\n", szUserName);...
Page 483 = '\0'; if(line[x]) ++x; y=0; while(line[y++] = line[x++]); return word; void plustospace(char *str) register int x; for(x=0;str[x];x++) if(str[x] == '+') str[x] = ' '; char *fmakeword(FILE *f, char stop, int *cl) int wsize; , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 484 * Change the string to upper case int to_upper(char *string) int len; int i; char *tmp=NULL; if (string && strlen(string)) if (!(tmp=(char*)strdup(string))) return 0; len=strlen(string); for (i=0; i<len; i++) string[i]=toupper(tmp[i]); free(tmp); return 1; , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 485 PPENDICES ECTION PPENDIX void getquery(char *paramd, char **paramv) if (paramd == NULL) *paramv = NULL; else *paramv = (char *)strtok(paramd, "&"); void getnextquery(char **paramv) *paramv = (char *)strtok(NULL, "&"); , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 486: Appendix D
This appendix provides instructions on how to use an over- ride account if typical pop-up blocking software is installed, as in the following products: Yahoo! Toolbar, Google Toolbar, AdwareSafe, Mozilla Firefox, and Windows XP Service Pack 2 (SP2). , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 487: Yahoo! Toolbar Pop-Up Blocker
1. Go to the Yahoo! Toolbar and click the pop-up icon to open the pop-up menu: Fig. D-2 Select menu option Always Allow Pop-Ups From 2. Choose Always Allow Pop-Ups From to open the Yahoo! Pop-Up Blocker dialog box: , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 488 Pop-Ups list box to activate the Allow button. 4. Click Allow to move the selected source to the Always Allow Pop-Ups From These Sources list box. 5. Click Close to save your changes and to close the dialog box. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 489: Google Toolbar Pop-Up Blocker
# blocked icon: Fig. D-4 # blocked icon enabled Clicking this icon toggles to the Site pop-ups allowed icon, adding the override account window to your white list: Fig. D-5 Site pop-ups allowed icon enabled , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 490: Adwaresafe Pop-Up Blocker
3. Click the Override button to open the override account pop-up window. 4. Go back to the SearchSafe toolbar and click the icon for Popup protection off to toggle back to # popups blocked. This action turns on pop-up blocking again. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 491: Mozilla Firefox Pop-Up Blocker
3. With the “Block unrequested popup windows” checkbox checked, click Allowed Sites and enter the URL to allow the override account window to pass. 4. Click OK to save your changes and to close the dialog box. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 492: Windows Xp Sp2 Pop-Up Blocker
Internet Options to open the Internet Options dialog box. 2. Click the Privacy tab: Fig. D-7 Enable pop-up blocking 3. In the Pop-up Blocker frame, check “Block pop-ups”. 4. Click Apply and then click OK to close the dialog box. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 493: Temporarily Disable Pop-Up Blocking
1. In the Options page (see Fig. D-1), enter your Username and Password. 2. Press and hold the Ctrl key on your keyboard while simultaneously clicking the Override button—this action opens the override account pop-up window. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 494: Use The Ie Toolbar
3. In the Options page (see Fig. D-1), enter your Username and Password. 4. Click the Override button to open the override account pop-up window. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 495: Set Up The Information Bar
2. Click the Override button. This action displays the following message in the Information Bar: “Pop-up blocked. To see this pop-up or additional options click here...”: Fig. D-10 Information Bar showing blocked pop-up status , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 496 NOTE: To view your white list, go to the Pop-up Blocker Settings dialog box (see Fig. D-9) and see the entries in the Allowed sites list box. 6. Go back to the Options page and click Override to open the override account window. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 497: Appendix E
8e6 Mobile Client ensures Internet activity of all end users located outside the organization will be tracked and filtered in the same manner as end users on the R3000 filtering appliance used in house, thereby giving you, the administrator, assurance that your organization will be...
Page 498: Environment Requirements
IE 6.0 or higher • JavaScript enabled • Pop-up blocking software, if installed, must be disabled Network Requirement • High speed connection from the external mobile R3000 server to mobile PCs Remote Filtering Components • Mobile Client software installed on each end user’s mobile PC •...
Page 499: Work Flow Overview
Mobile Client Installed on a Mobile PC For mobile PCs located outside of the organization: • a mobile R3000 filtering appliance set in the mobile mode is used for obtaining the end user’s profile and for logging his/her Internet activity •...
Page 500: Network Operations Overview
R3000 filtering appliance and an 8e6 ER (Enter- prise Reporter) reporting appliance on the network: Fig. E:1-2 Diagram showing 8e6 Mobile Client with R3000 and ER 8e6 Mobile Client 1. A URL request is made from an end user’s mobile PC to access inappropriate content on the Internet.
Page 501: Enterprise Reporter
URL is found and the site is disallowed, the Mobile Client software blocks the connection to the Web server. Enterprise Reporter A. The mobile R3000 appliance sends logs to the local Enterprise Reporter (ER) for processing. B. Using the ER Web Client, an administrator can generate customized reports on the remote end user in minutes.
Page 502: Mobile Server Section
IP address on your network. NOTE: If you do not have the R3000 Quick Start Guide, contact 8e6 Technologies immediately to have a copy sent to you. The basic requirements for initial network setup are as follows: •...
Page 503: Configure The R3000 To Use The Mobile Mode
Configure the R3000 to use the Mobile Mode The Operation Mode window is used for setting up the external mobile R3000 to use the mobile mode for filtering mobile PCs. 1. In the Mode frame, select “Mobile” to display frames used for configuring the R3000 in the mobile mode: Fig.
Page 504 4. In the Mobile Client Control frame, at the Client Resyn- chronization Time field, specify the interval of minutes for the external R3000 to resynchronize the profile on the end user's workstation with the profile set up for him/her on the internal R3000. By default, 60 minutes displays.
Page 505: Add Mac Addresses To The Master Ip Group
Fig. E:2-2 Members window 1. In the New Members frame, select “Source MAC”. 2. Enter the member’s MAC address. 3. Click Add to include the MAC address entry in the Current Members list box. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 506: Select Mac Addresses For A Sub Group
MAC addresses for inclusion in the sub- group. , sub-group with MAC addresses Fig. E:2-3 Members window The Modify Sub Group Member frame is comprised of the IP Address and MAC Address frames. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 507 MAC address, and then pressing the Shift key on your keyboard while clicking the last MAC address, and then clicking the arrow key pointing to that list box. 3. Click Modify to apply your settings. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 508: View Sub Group Mac Addresses
MAC addresses display in the Member MAC(s) list box in the MAC Address frame. If the sub-group has been completely defined, IP address criteria was entered in the IP Address frame and saved in this window. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 509: Add A Mac Address To An Individual Member
Fig. E:2-5 Member window with MAC Address 1. In the Modify Individual Group Member frame, select the member’s MAC Address from the pull-down menu. 2. Click Modify to apply your changes. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 510: Upload Mac Address File For Global, Ip Group
IP address and MAC address. For example, if the end user’s IP address is 150.100.30.2 and his/her MAC address is 00:04:21:AF:33:E1, the , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 511 “rreynolds”: rreynolds,150.100.30.2,A,J CHAT R GPORN I,1, ,1 rreynolds,00:04:21:AF:33:E1,A,J CHAT R GPORN I,1, ,1 NOTE: For other examples of entries to include in the profile file, go to http://www.8e6.com/r3000help/files/ 2group_ipprofiles.html. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 512: Mobile Client Section
• An .msi package that can be assigned via Group Policy to workstations to remove a previously-installed Mobile Client package (the "remover," 8e6purge.msi) • Online help instructions for configuring, deploying, and removing the Mobile Client. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 513: Download And Install The Deployment Kit
Download and Install the Deployment Kit To download the 8e6 Mobile Client Windows Deployment Kit to your machine: 1. Insert the CD-ROM that was sent with your R3000 server into your machine. 2. Open the 8e6MobileClient folder and find the .msi file for the 8e6 Mobile Client application.
Page 514 8e6 Mobile Client Windows Deployment Kit Installation Wizard: Fig. E:3-4 Windows Deployment Kit Installation Wizard 6. Click Next to proceed in specifying the Destination Folder into which the downloaded file will be installed: , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 515 7. Specify the destination folder to be used, and then click Next to go to the page that confirms the installation process is ready to begin: Fig. E:3-6 Installation process ready to begin 8. Click Next to begin the installation process: , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 516 PPENDICES ECTION PPENDIX Fig. E:3-7 Installation process in progress The following page displays when the installation process is complete: Fig. E:3-8 Installation complete 9. Click Finish to close the wizard dialog box. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 517: Access The Mobile Client Configuration Editor
To begin using the Configuration Editor, consult the help topics at Start > Programs > 8e6 Mobile Client Deploy- ment Kit > Online Help, or via the Help link in the Configu- ration Editor. Or, refer to the instructions in this appendix. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 518: Select The Package: Windows Or Macintosh Os X
Mobile Server cannot be found checkboxes.”—the latter which is populated with a check mark. For Windows, the “Force auto-reboot even if user is logged in during instal- lation.” checkbox also is activated. This checkbox displays greyed-out for Macintosh packages. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 519 PPENDICES ECTION PPENDIX Fig. E:3-11 Windows package opened Fig. E:3-12 Macintosh package opened , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 520: Configure The Mobile Client For Deployment
4. Click Add to include the entry in the list box below. 5. After entering each mobile R3000, click OK to close the dialog box and to display your entries in the Mobile filter host(s) field of the 8e6 Mobile Client Configuration Editor.
Page 521: Add, Remove Internal R3000
R3000 is using a different port. 4. Click Add to include the entry in the list box below. 5. After entering each internal R3000, click OK to close the dialog box and to display your entries in the Internal filter host(s) field of the 8e6 Mobile Client Configuration Editor.
Page 522: Add Proxy Address Or Host Name
Click the “Proxy authentication required” checkbox; this action activates the Username and Password fields. b. Enter the proxy server Username. c. Enter the proxy server Password twice: , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 523: Option: Block All Urls If Filter Cannot Be Found
The “Block all URLs if filter cannot be found” checkbox is checked by default. This setting indicates that if the Mobile Client cannot detect the mobile R3000, all URLs requested by the end user will be blocked. Uncheck this box if the end user’s workstation should be permitted unrestricted Internet access when the mobile R3000 is unavailable.
Page 524: Windows Option: Force Reboot With User Logged In
NOTE: The forced reboot option does not provide the end user with an opportunity to save files and close applications. Save settings Select File > Save as... and choose a filename, or select “8e6client.msi” or “8e6clientInstaller.mpkg.tar” to overwrite the original file. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 525: Mobile Client Deployment To Windows Computers
Right-click the new package and choose Properties > Deployment, and then check the "Uninstall this appli- cation when it falls out of the scope of management" box. Click OK. f. Close the Group Policy Object Editor. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 526 To create a WMI filter: WMI filters are capable of applying very sophisticated selection criteria to set the scope of a policy. See Microsoft Knowledgebase article #555253 for details on creating WMI filters: http://support.microsoft.com/kb/ 555253 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 527 NOTE: In some cases involving Windows XP workstations, it may be necessary to reboot twice for Group Policy processing to occur. c. Verify the Mobile Client is blocking access to unautho- rized Web sites, and is allowing access to other sites. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 528: Installation On A Single Computer
Fig. E:3-18 Finish installation process 2. To complete the installation process now, save any appli- cations—if necessary, and then click Yes to shut down and restart the computer. Or, click No to complete the installation process later. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 529: Mobile Client Removal From Computers
Mobile Client removed, go to the taskbar and select Start > Control Panel > Add or Remove Programs in Windows XP, and Start > Settings > Control Panel > Add/Remove Programs in Windows 2000. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 530 4. Copy the eight-digit number displayed in the ID field. In this example: 23526528 5. Access the 8e6 Mobile Client Configuration Editor, and go to Tools > Create uninstall key... to open the Create Uninstall Key pop-up window: , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 531 Copy this Uninstall key. In this example: 0d72dd NOTE: Click Close to close the Create Uninstall Key pop-up window. 7. Access the Uninstall dialog box again, and enter the generated password key in the Key field. In this example: 0d72dd , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 532 8. Click OK to begin the uninstallation process. When the Mobile Client has been uninstalled, a message displays asking you to restart the machine: Fig. E:3-24 Restart message 9. Click Restart to restart the machine. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 533: Appendix F
PPENDIX Appendix F Configuring the R3000 for ER Reporting When configuring the R3000 to be used with an ER unit, the following procedures must be completed in order for the ER to receive logs from the R3000. Entries in the R3000 Administrator console 1.
Page 534 Remove. 4. After the ER has been configured, and logs have been transferred from the R3000 to the ER, click the Log tab to view transfer activity. 5. On the Log tab, click View Log to view up to the last 300 lines of transfer activity in the View Log frame.
Page 535: Entries In The Er Administrator Console
IMPORTING: shadow.log.machine1. Once you see an entry, reporting information will be available one hour after the timestamp of the import listing. NOTE: Transfers occur each hour. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 536: Appendix G
PPENDIX Appendix G RAID Maintenance This appendix pertains to R3000 “H”, “SL”, and “HL” servers and is divided into three parts: Hardware Components, Server Interface, and Troubleshooting—in the event of a failure in one of the drives, power supplies, or fans.
Page 537: Part 2: Server Interface
• FLTR = Filtering Status • LIBR = Library Update Status • RAID = Hard Drive Status • UPDT = Software Update Status , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 538 Library updated more than three days ago RAID Green RAID mode enabled and running RAID mode is inactive Hard drive fault or failure UPDT Amber Software update detected No software update detected , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 539: Front Control Panels On H, Sl, And Hl Units
(see also Rear of chassis). These indicators are used for easy location of the chassis in a large stack config- uration. The LED remains on until the button is pressed a second time. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 540 When the power button is pressed again, the main power to the server is removed but standby power is still supplied to the server. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 541: Rear Panels On H And Hl Units
An LED indi- cator is located above each of the power plugs. (See Power supply failure in the Troubleshooting sub-section for infor- mation on detecting a power supply failure and resolving this problem.) , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 542: Part 3: Troubleshooting
Verification of the failed drive should first be made in the Administrator console before proceeding, as data on the server will be lost in the event that the wrong drive is removed from the unit. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 543: Step 2: Verify The Failed Drive In The Admin Console
“OK” displays to the right of the hard drive number, and no other text displays in the window. However, if a hard drive has failed, the message “FAIL” displays to the right of the hard drive number. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
Page 544: Step 3: Replace The Failed Hard Drive
Replace the failed drive with your spare replacement drive. NOTE: Contact Technical Support if you have any questions about replacing a failed hard drive. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 545: Step 4: Rebuild The Hard Drive
Removing the wrong power supply will cause the system to crash. Step 2: Unplug the power cord To prevent electrical shock to yourself and damage to the unit, unplug the power cord from the failed power supply. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 546: Step 3: Replace The Failed Power Supply
Step 4: Contact Technical Support Contact Technical Support to order a new replacement power supply and for instructions on returning your failed power supply to 8e6. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 547: Fan Failure
Check the routing of the cables and make sure all fans are present and operating normally. The LED will remain steady as long as the over- heating condition exists. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 548: Appendix H
- An R3000 set up in the firewall mode will filter all requests. If the request is appropriate, the original packet will pass unchanged. If the request is inappropriate, the original packet will be blocked from being routed through.
Page 549 IM services specified in the library category. invisible mode - An R3000 set up in the invisible mode will filter all connections on the Ethernet between client PCs and the Internet, without stopping each IP packet on the same Ethernet segment.
Page 550 - A process that occurs when the R3000 attempts to resolve the IP address of the authentication server with the machine name of that server. This contin- uous and regulated automated procedure ensures the connection between the two servers is maintained.
Page 551 Using this feature of the R3000, groups and/or individual client machines can be set up to block the use of P2P services specified in the library category.
Page 552 The user profile in the Radius accounting server holds the filter definition for the user. Real Time Probe - On the R3000, this tool is used for moni- toring the Internet activity of specified users in real time. The report generated by the probe lets the administrator know whether end users are using the Internet appropriately.
Page 553 Traveler - 8e6’s executable program that downloads updates to your R3000 on demand or at a scheduled time. URL - An abbreviation for Uniform Resource Locator, the global address of Web pages and other resources on the Internet.
Page 554 PPENDICES ECTION PPENDIX URL from that library category or an uncategorized URL is requested. white list - A list of approved library categories for a speci- fied entity’s filtering profile. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 555 Backup/Restore menu 171 Backup/Restore window 171 block page 12 custom 447 route table 96 Block Page Authentication window 77 Block Page Customization window 212 Block Page Device 161 Block Page Route Table window 96 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 556 Current memory usage diagnostic tool 114 custom categories 23 delete 429 menu 410 Custom Categories menu 407 custom category definition 524 Customer Feedback Module menu 297 Customer Feedback Module window 297 Customization menu 205 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 557 524 diagram with filtering and cache setup 16 diagram with firewall and cache setup 15 frame, terminology 5 FTP 10 CFM 297 Change Log FTP Setup 125 proxy setting 280 report configuration 330 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 558 Group screen 53 Group window 355 Hardware Failure Detection window 187 Help screen 54 Help Topics 55 HL server 512 HTTPS 10 library updates 279 login 48 port numbers 437 proxy environment 164 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 559 Java Virtual Machine 10 JavaScript 10 keyword definition 525 search engine, 8e6 supplied category 318 search engine, custom category 426 update 281 URL, 8e6 supplied category 314 URL, custom category 423 LAN Settings window 90 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 560 Lock Page Customization window 209 lock profile 20 profile type 21 backup/restore 178 emergency patch update 292 ER 509 library update 285 library update message 439 patch updates 139 R3000 log transfer 324 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 561 481 Minimum Filtering Categories categories profile 265 minimum filtering level 24 bypass options 270 definition 526 Minimum Filtering Level window 265 categories profile 265 port profile 268 mobile mode 163 Mode menu 159 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 562 527 global group 252 Google Toolbar popup blocking 465 Mozilla Firefox popup blocking 467 override popup blockers 462 profile type 21 Windows XP SP2 popup blocking 468 Yahoo! Toolbar popup blocking 463 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 563 Process list diagnostic tool 112 Product Warranties section 433 profile global group 241 group 367 individual IP member 401 minimum filtering level 265 sub-group 397 Profile Control window 220 profile string definition 527 elements 436 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 564 164 definition 527 pull-down menu, terminology 6 Quick Start Guide 48 R2000 1 R3000 Enterprise Filter 1 R3000 Quick Start Guide 478 radio button, terminology 6 Radius definition 528 Radius Authentication Settings menu 181 Radius Authentication Settings window 181...
Page 565 Setup window 146 Shadow Log Format window 347 Shift key 64 ShutDown window 85 SL server 512 SMTP definition 528 SMTP Server Settings window 131 SNMP definition 528 SNMP window 185 Source mode 35 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 566 System Performance diagnostic tool 114 system requirements 10 System screen 53 Target mode 35 technical support 430 text box, terminology 7 time profile add 377 definition 529 delete 383 modify 383 profile type 21 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 567 8e6 supplied category 314 custom category 423 URL, definition 529 URLs window 309 8e6 supplied category 309 custom category 413 usage logs 116 View Log File window 115 virtual IP address, definition 529 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
Page 568 78 white list definition 530 wildcard 295 window, terminology 8 Windows 2000 474 Windows XP 474 workstation requirements 10 X Strikes Blocking global group filter option 248 X Strikes Blocking window 189 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...