8e6 Technologies R3000 User Manual
  1. Manuals
  2. Brands
  3. 8e6 Technologies Manuals
  4. Network Hardware
  5. Enterprise Filter Authentication R3000
  6. User manual

8e6 Technologies R3000 User Manual

Enterprise filter
Hide thumbs Also See for R3000:
1
2
3
4
Table Of Contents
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
Table of Contents

Advertisement

Quick Links

Download this manual See also: User Manual
R3000
| Enterprise Filter
®
USER
GUIDE
R3000IR Model: R3000
Release 2.0.12 • Manual Version 1.01

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the R3000 and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for 8e6 Technologies R3000

Summary of Contents for 8e6 Technologies R3000

  • Page 1 R3000 | Enterprise Filter ® USER GUIDE R3000IR Model: R3000 Release 2.0.12 • Manual Version 1.01...
  • Page 2 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 3 8e6 Technologies shall not be liable for any error or for incidental or consequential damages in connection with the furnishing, performance, or use of this manual or the exam- ples herein.
  • Page 4 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 5: Table Of Contents

    ONTENTS ..........1 NTRODUCTORY ECTION R3000 Enterprise Filter ............... 1 About this User Guide ..............1 How to Use this User Guide ............3 Conventions ..................3 Terminology ..................4 Overview ..................9 Environment Requirements ............. 10 Workstation Requirements .............. 10 Network Requirements ..............
  • Page 6 Block IM for a Specific Entity ........32 Block P2P for a Specific Entity ........33 Chapter 3: Synchronizing Multiple Units ........ 34 R3000 Synchronization ..............34 Synchronization Setup ..............36 Setting up a Source Server ............36 Setting up a Target Server ............36 Types of Synchronization Processes ..........
  • Page 7 Log Off ..................66 ......67 LOBAL DMINISTRATOR ECTION Introduction ................67 Chapter 1: System screen ............68 Control ..................... 70 Filter window ................71 Local Filtering..............72 Disable Local Filtering Options ........72 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 8 Secure Logon ................100 Logon Settings window ............101 Enable, Disable Password Expiration ....... 102 Enable, Disable Account Lockout ........103 Logon Management ..............105 View User Account Status, Unlock Username ....106 viii , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 9 Enable the Alert Feature ........... 129 Modify Alert Settings ............129 Disable the Alert Feature ..........129 SMTP Server Settings window ..........130 Enter, Edit SMTP Server Settings........130 Verify SMTP Settings ............131 Patch ..................... 132 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 10 Setup window ................. 145 Using Only One R3000 on the Network ......146 Using More than One R3000 on the Network ....146 Set up an R3000 to be a Source Server..... 146 Sync All Target Servers with the Same Settings ..149 Set up an R3000 to be a Target Server......
  • Page 11 Set up Email Alert Recipients ........193 Remove Email Alert Recipients ........193 Logon Accounts ..............194 Set up Users Authorized to Unlock Workstations ..194 Deactivate an Authorized Logon Account....195 Delete a Logon Account ..........195 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 12 Remove a Segment from the Network ......233 Rules window ................. 234 Add a Rule ................ 235 Modify a Rule ..............236 Remove a Rule ..............237 Global Group Profile window ..........238 Category Profile ..............239 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 13 Updates ..................275 Configuration window ............. 276 Select the Transfer Protocol..........276 Set a Time for Updates to be Retrieved......277 Optional: Specify a Proxy Server ........277 Select the Log Level............277 xiii , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 14 Library Details window ............305 View Library Details ............305 URLs window ................306 View a List of URLs in the Library Category ..... 307 Add or Remove URLs, Reload the Library......308 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 15 Specify Email File Criteria........... 324 Set up Email Addresses to Receive Reports....325 Remove Email Addresses .......... 325 Logon Accounts ..............326 Set up Users Authorized to Create Probes....326 Deactivate an Authorized Logon Account....327 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 16 Add the MAC Address of the Member ......349 Remove a Member from the Group ........349 Override Account window ............350 Add an Override Account ..........351 Category Profile ............352 Redirect URL .............. 354 Filter Options .............. 355 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 17 Sub Group (IP Group) window ..........384 View IP Sub-Group Details ..........385 Add IP Sub-Group Details..........385 Members window ..............387 Modify Sub-Group Members ..........388 Sub Group Profile window ............389 xvii , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 18 Upload a Master List of URLs........410 Upload a Master List of Wildcard URLs...... 412 Reload the Library............. 414 URL Keywords window ............415 View a List of URL Keywords..........416 Add or Remove URL Keywords ........416 xviii , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 19 Extended Technical Support and Service ........427 ..........428 PPENDICES ECTION Appendix A ................428 Filtering Profile Format and Rules ..........428 Rule Criteria ................428 Appendix B ................431 Traveler Log Messages ..............431 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 20 Emergency Update ..............438 Appendix C ................439 Create a Custom Block Page ............439 Part I: Modify the R3000 ............439 1. Enable block page redirection........439 Option 1: Modify the back end ........439 Option 2: Modify the R3000 console......440 2.
  • Page 21 Enterprise Reporter ............ 469 Mobile Server Section ............470 Initial Setup ............... 470 Configure the R3000 to use the Mobile Mode....471 Add MAC Addresses to the Master IP Group ....473 Select MAC Addresses for a Sub Group......474 View Sub Group MAC Addresses ........
  • Page 22 Access the Mobile Client Configuration Editor ....485 Select the Package: Windows or Macintosh OS X ... 486 Configure the Mobile Client for Deployment ..... 488 Add, remove mobile R3000 ........488 Add, remove internal R3000 ........489 Add proxy address or host name........ 490 Option: Block all URLs if filter cannot be found ..
  • Page 23 Enterprise Filter, R2000 Enterprise Edition, and R2000 Authentication Module products. As with these applications, the R3000 tracks each user’s online activity, and can be configured to block specific Web sites or service ports, thereby protecting your organization against lost produc- tivity, network bandwidth issues, and possible legal prob- lems that can result from the misuse of Internet resources.

  • Page 24: Ntroductory Ection

    • Group Administrator Section - This section includes information for administrators authorized by the global administrator to manage profiles of designated groups and their associated users on the R3000. Group admin- istrators also have rights to access certain library cate- gory functions.

  • Page 25: How To Use This User Guide

    WARNING: The “warning” icon is followed by italicized text cautioning you about making entries in the application, executing certain processes or procedures, or the outcome of specified actions. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 26: Terminology

    • field - an area in a dialog box, window, or screen that either accommodates your data , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 27 One or more tree lists also can display in this panel. When an item in the tree list is double- clicked, the tree list opens to reveal items that can be selected. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 28 • screen - a main object of an appli- cation that displays across your monitor. A screen can contain panels, windows, frames, fields, tables, text boxes, list boxes, icons, buttons, and radio buttons. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 29 By clicking the link for a topic, the window for that topic displays in the right panel of the screen, or a menu of sub- topics opens. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 30 Other types of windows include pop-up windows, login windows, or ones from the system such as the Save As or Choose file windows. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 31: Overview

    To help you become familiar with the R3000 and how it func- tions on the network, Chapter 1 of this section of the User Guide provides an overview on filtering. Chapter 2 gives insight into Web site access logging, and instant messaging and peer-to-peer setup procedures.

  • Page 32: Environment Requirements

    • Macintosh OS X Version 10.5 running Safari 2.0, Firefox • JavaScript enabled • Java Virtual Machine • Java Plug-in (use the version specified for the R3000 software version) NOTE: R3000 administrators must be set up with software instal- lation privileges in order to install Java used for accessing the interface.

  • Page 33: Operational Modes

    HAPTER ILTERING PERATIONS Chapter 1: Filtering Operations Operational Modes Based on the setup of your network, the R3000 can be configured to use one of these operational modes for filtering the network: • invisible mode • router mode • firewall mode...

  • Page 34: Chapter 1: Filtering Operations

    ILTERING PERATIONS Invisible Mode If the R3000 is set up in the invisible mode, the unit will filter all connections on the Ethernet between client PCs and the Internet, without stopping each IP packet on the same Ethernet segment. The unit will only intercept a session if an inappropriate request was submitted by a client.

  • Page 35: Invisible Mode

    (4) is sent to the Internet server. An R3000 set up in the invisible mode can also work in the router mode. Figure 1:1-2 illustrates an example of a monitor mode setup, with the R3000 connected to the managed switching hub.

  • Page 36: Router Mode

    ILTERING PERATIONS Router Mode If the R3000 is set up in the router mode, the unit will act as an Ethernet router, filtering IP packets as they pass from one card to another. While all original packets from client PCs are allowed to pass, if the R3000 determines that a request is inappropriate, a block page is returned to the client to replace the actual requested Web page or service.

  • Page 37: Firewall Mode

    Firewall Mode The firewall mode is a modification of the router mode. With the R3000 set up in this mode, the unit will filter all requests. If the request is appropriate, the original packet will pass unchanged. If the request is inappropriate, the original packet will be blocked from being routed through.
  • Page 38 Figure 1:1-5 illustrates an example of a firewall mode setup in which requests are always sent to the caching server. In this scenario the R3000 will be affected if the caching proxy server contains unfiltered, “bad” cached pages. 8e6 recom- mends that cached content is cleared or expired after installing the R3000.

  • Page 39: Group Types

    NOTES: If authentication is enabled, the global administrator can also access the NT and LDAP branches of the tree. If multiple R3000 units are set up on the network and the synchro- nization feature is used, an R3000 that is set up to receive profile changes will only display the Global Group type in the tree list.

  • Page 40: Ip Groups

    IP members, override account and time profiles, and maintains filtering profiles of all members in the master IP group. Fig. 1:1-6 IP diagram with a sample master IP group and its members , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 41: Global Group

    • time profile - used by a sub-group/individual IP group member at a specified time. Other filtering profiles • authentication profile - used by NT and/or LDAP group members NOTE: For information about authentication filtering profiles, see the R3000 Authentication User Guide. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 42: Filtering Profile Types

    IP sub-group and is customized for sub-group members. Individual IP Member Filtering Profile An individual IP member filtering profile is created by the group administrator.This filtering profile applies to a speci- fied end user in a master IP group. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 43: Static Filtering Profiles

    Active filtering profiles include the global group profile, over- ride account profile, time profile, and lock profile. NOTE: For information about authentication filtering profiles, see the R3000 Authentication User Guide. Global Filtering Profile The global filtering profile is created by the global adminis- trator.

  • Page 44: Active Filtering Profiles

    (default) filtering profile • filter settings - used by service ports, filtering profiles, rules, and the minimum filtering level to indicate whether users should be granted or denied access to specified Internet content , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 45: Filtering Profile Components

    However, unlike 8e6 supplied categories, a custom cate- gory can be deleted. NOTE: 8e6 cannot provide updates to custom categories. Main- taining the list of URLs and keywords is the responsibility of the global or group administrator. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 46: Rules

    Service ports are used when setting up filter segments on the network (the range of IP addresses/netmasks to be detected by the R3000), the global (default) filtering profile, and the minimum filtering level. When setting up the range of IP addresses/netmasks to be detected, service ports can be set up to be open (ignored).

  • Page 47: Service Ports

    • ignore - if the filter segment detected on the network has a service port set up to be ignored, that service port will be bypassed , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 48: Filtering Rules

    7. An override account profile takes precedence over an authentication profile. This account may override the minimum filtering level—if the override account was set up in the master IP group tree, and the global adminis- , R3000 E ECHNOLOGIES NTERPRISE ILTER...
  • Page 49 8. A lock profile takes precedence over all filtering profiles. This profile is set up under Filter Options, by enabling the X Strikes Blocking feature. Fig. 1:1-7 Sample filtering hierarchy diagram , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 50: Web Access Logging

    LOCKING Chapter 2: Logging and Blocking Web Access Logging One of the primary functions of the R3000 is to log the activity of users on the Internet. Information captured in the R3000 log files are transferred to the Enterprise Reporter (ER) where they are “normalized”...

  • Page 51: Chapter 2: Logging And Blocking

    When the IM module is loaded on the server, the R3000 compares packets on the network with IM libraries stored on the R3000 server. If a match is found, the R3000 checks the user’s profile to see whether the user’s connection to the IM service should be blocked, and then performs the appro- priate action.

  • Page 52: P2P Blocking

    When the P2P module is loaded on the server, the R3000 compares packets on the network with the P2P library stored on the R3000 server. If a match is found, the R3000 checks the user’s profile to see whether the user’s connec- tion to the P2P service should be blocked, and then performs the appropriate action.
  • Page 53 (such as IMGEN, IMGCHAT, IMGTALK, ICQAIM, IMMSN, IMMYSP, and/or IMYAHOO) set up to be blocked • the minimum filtering level profile must have both CHAT and specified individual Instant Messaging library cate- gories set up to be blocked. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 54: Using Im And P2P

    IM traffic with the Range to Detect feature is desired • the minimum filtering level profile should not have IM blocked, unless blocking all IM traffic with the Range to Detect feature is desired. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 55: Block P2P For All Users

    P2P traffic with the Range to Detect feature is desired • the minimum filtering level profile should not have P2P blocked, unless blocking all P2P traffic with the Range to Detect feature is desired. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 56: R3000 Synchronization

    Alone” mode, “Source” mode, or “Target” mode—based on the setup within your organization. In a multi-R3000 server environment, all R3000 units should be set up with the same user profile data, so that no matter which R3000 server a user’s PC accesses on the network, that user’s Internet usage is appropriately filtered and blocked.

  • Page 57: Chapter 3: Synchronizing Multiple Units

    R3000 appliances on the network. Whenever a filtering configuration change is made on the source R3000 unit, that change is sent to all target R3000 units that have been identified by the source unit via the Synchronization Setup window of the R3000 console. This means that all filtering configuration should be made on the source R3000 unit.

  • Page 58: Synchronization Setup

    This entry identifies the location of each target unit on the network. WARNING: If an R3000 server is set up in the Source mode with a Network Address Translation (NAT) device between the source and target server(s), be sure that ports 26262, 26268, and 88 are open on the source server.

  • Page 59: Types Of Synchronization Processes

    YNCHRONIZING ULTIPLE NITS WARNING: If an R3000 server is set up in the Target mode with a NAT device between the target and source server, be sure that ports 26262 and 26268 are open on the target server. This setup is required so that the target server can communicate with the source server.

  • Page 60: Filtering Profile Synchronization Process

    Once locally applied on the source server, this update will be placed in a queue for submission to target R3000 servers. The source server will then send the information in the queue to all target servers.

  • Page 61: Library Synchronization Process

    The delay in activating a library change can take a little longer than in activating a filtering profile change. This is due to the fact that the library on the R3000 is loaded into the physical memory. When a change is made to the library, a new library must be loaded into memory with the changes.
  • Page 62 R3000s will read from the source R3000 upon load. These items will then be updated on an as needed basis from the source R3000. For purpose of differentiation, these items will be referred to as functionally synchronized for purposes of this user guide.

  • Page 63: Synchronized, Non-Synchronized Items

    • Global Group Profile • Override Account: addition/deletion, activation/deactiva- tion • Lock Profiles • IP User/Group and sub-group: additions/deletions, changes, filter changes • NT/LDAP User/Group: additions/deletions, changes, filter changes, profile activation/deactivation • Category Weight System additions/deletions , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 64: Synchronized Items (All)

    • Default routes • Patch application • Synchronization settings • Filter Mode • NIC Configuration • Backup/Restore • Radius Authentication Settings • SNMP configuration • X Strikes Blocking settings • Warn Option Setting , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 65: Non-Synchronized Items

    Customization, Warn Page Customization, Profile Control settings • Minimum Filtering Level • Rules • Global Group Profile • Override Account: addition/deletion, activation/deactiva- tion • Lock Profiles • IP User/Group and sub-group: additions/deletions, changes, filter changes , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 66 • Default routes • Patch application • Synchronization settings • Filter Mode • NIC Configuration • Backup/Restore • Radius Authentication Settings • SNMP configuration • X Strikes Blocking settings • Warn Option Setting , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 67: Server Maintenance Procedures

    NITS Server Maintenance Procedures Source Server Failure Scenarios In the event that the source R3000 unit should fail, the target servers will continue to run using the last known configura- tion loaded from the source server. However, all dynamic authentication-based profiles will eventually time-out, since the source R3000 server can no longer verify user creden- tials.

  • Page 68: Source Server Failure Scenarios

    5. Go to the Reboot window (accessible via System > Control) and reboot the server. 6. Once the R3000 is rebooted, reconnect to the console and access the Backup/Restore window. 7. Upload the last good configuration from the failed source server to the new source server.

  • Page 69: Use A Backup File To Set Up A Source Server

    Configure this R3000 so that the IP addresses are that of the target server which became the source server.

  • Page 70: Initial Setup

    TARTED Chapter 4: Getting Started Initial Setup To initially set up your R3000 server, follow the instructions in the R3000IR Quick Start Guide, the booklet packaged with your R3000IR unit. This guide explains how to perform the initial configuration of the server so that it can be accessed via an IP address on your network.

  • Page 71: Chapter 4: Getting Started

    HAPTER ETTING TARTED Fig. 1:4-1 R3000 Introductory Window NOTE: The R3000 Introductory Window must be left open throughout your session. This window displays minimized when the Login dialog box opens. 4. When the Login dialog box opens, enter your Username and Password: Fig.
  • Page 72 ETTING TARTED NOTE: See Chapter 1: System screen in the Global Administrator Section for information on logging into the R3000 interface if your password has expired. 5. Click OK to close the login dialog box and to access the welcome screen of the Administrator console: Fig.

  • Page 73: Last Library Update Message

    ETTING TARTED Last Library Update message If it has been more than seven days since the R3000 last received updates to library categories, upon logging into the Administrator console a pop-up dialog box opens and displays the following message: ”Libraries were last updated more than 7 days ago.

  • Page 74: Last Library Update Message

    Last Library Update message pop-up box. After the libraries are updated, the welcome screen will appear as in Fig. 1:4:3 with today’s date as the Last Library Update in black text. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 75: Navigation Tips

    • Reporting - clicking this button displays the main screen for the Reporting section. The Reporting section contains windows used for configuring reports on users’ Internet activities. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 76 HAPTER ETTING TARTED • Help - clicking this button displays the Help screen. This screen includes navigational tips and a link to the PDF copy of this User Guide: Fig. 1:4-5 Help screen , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 77: Help Features

    1. Click a link to go to a specified topic. 2. To view Help Topics for another section, click the tab for that section: System, Group, Library, Reporting, or Help. 3. Click Close Window to close the Help Topics window. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 78: Tooltips

    • Hover Display The yellow tooltip box displays when you hover over the icon with your mouse: Fig. 1:4-7 Tooltip mouseover effect To close the tooltip box, move the mouse away from the icon. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 79 Screens can contain topic links and sub-topic menus, and/or tree lists with topics and sub-topic menus. Windows can contain tabs that function as sub- windows. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 80: Screen And Window Navigation

    In System, Library, and Reporting screens, the navigation panel contains topic links. By clicking a topic link, the window for that topic displays in the right panel: Fig. 1:4-9 Selected topic and its corresponding window , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 81: Select Sub-Topics

    For these topics, clicking a topic link opens a menu of sub-topics: Fig. 1:4-10 Sub-topics menu When a sub-topic from this menu is selected, the window for that sub-topic displays in the right panel of the screen. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 82 (+) sign, when that branch of the tree is collapsed. By double-clicking the entity, a minus (-) sign replaces the plus sign, and all branches within that branch of the tree display. An item in the tree is selected by clicking it. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 83: Navigate A Tree List

    When a tree list topic is selected and clicked, a menu of sub- topics opens: Fig. 1:4-12 Tree list topics and sub-topics Clicking a sub-topic displays the corresponding window in the right panel, or opens a pop-up window or alert box, as appropriate. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 84: Navigate A Window With Tabs

    Apply button. NOTE: In the Time Profile and Override Account pop-up windows, entries are saved at the bottom of the window. Fig. 1:4-13 Window with tabs , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 85: Console Tips And Shortcuts

    The navigation path displays at the top of each window: Fig. 1:4-14 Navigation path This path reminds you of your location in the console. The entire path shows the screen name, followed by the topic name, and sub-topic name if applicable. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 86: Refresh The Console

    Ctrl and C keys on the keyboard. • Paste command Text that was just copied from a field can be pasted into another field that is either blank or populated with text. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 87: Copy And Paste Text

    IP Calculator pop-up window displays the IP address, default Netmask in both the Dotted Decimals Notation (e.g. “255.255.255.248”) and CIDR Notation (e.g. “29”) format, Min Host, and Max Host IP addresses. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 88: Log Off

    Fig. 1:4-16 Quit dialog box 2. Click Yes to close the Administrator console. 3. Click the “X” in the upper right corner of the R3000 Intro- ductory Window to close it. WARNING: If you need to turn off the server, see the ShutDown window of the System screen in the Global Administrator Section.

  • Page 89: Introduction

    Administrator console. This section is used by the autho- rized global administrator of the R3000 for configuring and maintaining the R3000 server. The global administrator is responsible for integrating the server into the existing network, and providing the server a high-speed connection to remote client workstations.

  • Page 90: Global Administrator Section

    Control settings, Network settings, Administrator account information, Secure Logon, Diagnostics, Alert contacts, Patch, Synchronization, operation Mode, Authen- tication settings (see the R3000 Authentication User Guide for information about this topic), NIC Mode, Backup/Restore operations, Reset settings, Radius Authentication Settings,...

  • Page 91: Chapter 1: System Screen

    Block Page Authentication, Authentication, Radius Authentication Settings, X Strikes Blocking, and Warn Option Setting. If an R3000 is set up in the Target mode to synchronize only library setting changes, all topics and sub-topics are available.
  • Page 92 DMINISTRATOR ECTION HAPTER YSTEM SCREEN Control Control includes options for controlling basic R3000 server functions. Click the Control link to view a menu of sub- topics: Filter, Block Page Authentication, ShutDown, and Reboot. Fig. 2:1-2 System screen, Control menu , R3000 E...

  • Page 93: Control

    HTTPS sites on R3000s set up in the Stand Alone or Source mode. In the Service Control frame, enabling Pattern Blocking will log IM and P2P end user activity, and block end users from using clients such as , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 94: Local Filtering

    The default setting has Local Filtering “On” and VLAN Detection “Off”. Disable Local Filtering Options If you have multiple R3000 servers on the network, you may wish to disable local filtering on the source server and use the server primarily for authenticating users who log on the network.

  • Page 95: Disable Local Filtering Options

    Disable HTTP Packet Splitting Detection To disable automatic detection of a split HTTP packet, click “Off.” This action removes the field below the radio buttons. NOTE: After making all entries in this window, click Apply. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 96: Https Filtering

    Specify your preference for filtering HTTPS sites in the HTTPS Filtering frame. Select from the following settings for the HTTPS Filtering Level: • “None” - if you do not want the R3000 to filter HTTPS sites • “Low” - if you want the R3000 to filter HTTPS sites...

  • Page 97: Service Control

    Or, to block all users from accessing P2P services, the global filtering profile and minimum filtering level must have the “PR2PR” library category set up to be blocked. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 98: Disable Proxy Pattern Blocking

    Click “Off” to disable Proxy Pattern Blocking. NOTE: After making all entries in this window, click Apply. Target(s) Filtering The Target(s) Filtering frame only displays if the R3000 currently being configured is set up in the Source mode for synchronization. The default setting has All Target(s) Filtering “On”.

  • Page 99: Block Page Authentication Window

    The Block Page Authentication window displays when Block Page Authentication is selected from the Control menu. This feature is used for entering criteria the R3000 server will use when validating a user’s account. Information entered/ selected in this window is used by the block page that displays when an end user attempts to access a site or service that is set up to be blocked.

  • Page 100: Enter, Edit Block Page Options

    IP group level. NOTE: Details about the Web-based Authentication option can be found in the R3000 Authentication User Guide. TIP: Multiple options can be selected by clicking each option while pressing the Ctrl key on your keyboard.
  • Page 101 Logon Script Path field, \\PDCSHARE\scripts displays by default. In this field, enter the path of the logon script that the R3000 will use when re-authenticating users on the network, in the event that a user's machine loses its connection with the server, or if the server is rebooted.

  • Page 102: Block Page

    • Category field - The name of the library category that blocked the user’s access to the URL displays. If the content the user attempted to access is blocked by an Exception URL, “Exception” displays instead of the library category name. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 103 Support page that explains why access to the site or service may have been denied. • 8e6 Technologies - Clicking this link takes the user to 8e6’s Web site. By default, these links are included in the block page under the following conditions: •...

  • Page 104: Options Page

    • HELP link • User/Machine frame contents The frame beneath the User/Machine frame includes infor- mation for options (1, 2, and/or 3) based on settings made in this window and the Common Customization window. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 105: Option 2

    LOBAL DMINISTRATOR ECTION HAPTER YSTEM SCREEN NOTE: Information about Option 1 is included in the R3000 Authentication User Guide. Option 2 The following phrase/link displays, based on options selected at the Re-authentication Options field: • Re-start your system and re-login - This phrase...

  • Page 106: Option 3

    Profile Control pop-up window. See Appendix D: Override Pop-up Blockers for information on how a user with an override account can authenticate if a pop-up blocker is installed on his/her workstation. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 107: Shutdown Window

    Control menu. This window is used for powering off the server. Fig. 2:1-9 ShutDown window Shut Down the Server In the ShutDown frame, click ShutDown to power off the server. To restart the server, the R3000 console needs to be re-accessed. , R3000 E ECHNOLOGIES NTERPRISE...

  • Page 108: Reboot Window

    ECTION HAPTER YSTEM SCREEN Reboot window The Reboot window displays when Reboot is selected from the Control menu. This window is used for reconnecting the server on the network. Fig. 2:1-10 Reboot window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 109: Reboot The Server

    Server Status message box, informing you that the server is now disconnected: Fig. 2:1-12 Server Status: disconnect message When the Server Status box closes, the R3000 Enter- prise Filter status message box opens and informs you that the server is rebooting itself, and how much time has elapsed since this process began: Fig.
  • Page 110 Fig. 2:1-15 Server connected alert box 3. Click OK to close the R3000 ready alert box. 4. Click OK to close the Server connected alert box. 5. You must now re-access the R3000 console.

  • Page 111: Network

    ECTION HAPTER YSTEM SCREEN Network Network includes options for configuring the R3000 server on the network. Click the Network link to view a menu of sub-topics: LAN Settings, NTP Servers, Regional Setting, and Block Page Route Table. Fig. 2:1-16 System screen, Network menu...

  • Page 112: Lan Settings Window

    YSTEM SCREEN LAN Settings window The LAN Settings window displays when LAN Settings is selected from the Network menu. This window is used for configuring network connection settings for the R3000. Fig. 2:1-17 LAN Settings window , R3000 E ECHNOLOGIES...

  • Page 113: Specify Lan Settings

    HAPTER YSTEM SCREEN Specify LAN Settings 1. In the Host Name field, the default host name is R3000. Enter up to 50 alphanumeric characters for the name of the host for this server, such as R3000.LOGO.com. 2. Specify the following information, as necessary: •...

  • Page 114: Ntp Servers Window

    IP addresses of servers running Network Time Protocol (NTP) software. NTP is a time synchronization system for computer clocks throughout the Internet. The R3000 will use the actual time from a clock at a specified IP address. NOTE: The System Time displays beneath the Details frame, using the YYYY/MM/DD HH:MM:SS Coordinated Universal Time (UTC) format for the current time zone.

  • Page 115: Specify Network Time Protocol Servers

    128.59.35.142, 142.3.100.15, and 129.132.98.11. NOTE: Any IP address following the first entry in the Servers list box is only used in the event that the R3000 cannot access the primary time NTP server specified. IP addresses are used in the order in which they display in the list box.

  • Page 116: Regional Setting Window

    The Regional Setting window displays when Regional Setting is selected from the Network menu. This window is used for specifying the time zone to be used by the R3000 and the language set type, if necessary. Fig. 2:1-19 Regional Setting window...

  • Page 117: Specify The Time Zone, Language Set

    R3000. WARNING: If using the R3000 with an 8e6 Technologies Enter- prise Reporter unit, be sure each R3000 used by the ER is set up in the same time zone as the ER. These “like” settings ensure consistency when tracking the logging times of all users on the network.

  • Page 118: Block Page Route Table Window

    Fig. 2:1-20 Block Page Route Table window NOTE: See the Block Page Authentication window for information on setting up block pages. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 119: Add A Router

    NOTE: Follow steps 1-4 for each router you wish to include in the routing table. Remove a Router To remove one or more routers from the IP/Mask list box: 1. Select the router(s) from the list box. 2. Click Delete. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 120: Administrator

    TIP: The default Username is admin and the Password is user3. 8e6 recommends that you retain this default account in the event that the R3000 unit cannot be accessed. An authorized 8e6 Tech- nologies technical representative may need to use this username and password when troubleshooting the unit.

  • Page 121: Add A Global Administrator Account

    The password is case sensitive. 3. Enter the same password again in the Confirm Pass- word field. 4. Click Modify to apply your settings. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 122: Delete A Global Administrator Account

    1: S LOBAL DMINISTRATOR ECTION HAPTER YSTEM SCREEN Delete a Global Administrator Account To delete a global administrator account: 1. Select the username from the Current User list box. 2. Click Delete. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 123: Secure Logon

    Secure Logon includes options for setting user passwords to expire after a designated number of days, and/or locking out users from the R3000 after unsuccessfully attempting to log in for the specified number of attempts within the defined timespan. Click the Secure Logon link to view a menu of sub-topics: Logon Settings, and Logon Management.

  • Page 124: Logon Settings Window

    IP address if an incorrect pass- word is entered for a specified number of times within a defined timespan. Fig. 2:1-23 Logon Settings window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 125: Enable, Disable Password Expiration

    OK, a different login dialog box opens: Fig. 2:1-24 New password entry This dialog box displays his/her Username and prompts him/her to enter a new password in the Password and Confirm Password fields. Upon clicking OK, the R3000 interface opens. , R3000 E ECHNOLOGIES NTERPRISE...

  • Page 126: Enable, Disable Account Lockout

    Lockout by IP address option(s) enabled— enter the number of times a user can enter an incorrect password during the interval defined in the Failed Password Attempts Timespan (in minutes) [1-1440] field before being locked out of the R3000. , R3000 E ECHNOLOGIES NTERPRISE...
  • Page 127 Allowable Number of Failed Password Attempts [1-10] field—before being locked out of the R3000. NOTE: If the number of failed attempts is 3 and the number of minutes in the timespan is 10, if any user (one or more) enters an...

  • Page 128: Logon Management

    R3000 interface—and for unlocking usernames and IPs currently locked out of the R3000.

  • Page 129: View User Account Status, Unlock Username

    View User Account Status, Unlock Username View Account Status The All Accounts Status frame displays password statuses of current login accounts set up in this R3000 being config- ured, including the Account Name, Type of account (Admin, Group, Probe, XStrike), Expired Date (either Never Expired...

  • Page 130: View Locked Ip Address, Unlock Ip Address

    TIP: Click No to close the dialog box. 3. Click Yes to display the alert box indicating the IP address was unlocked. 4. Click OK to close the alert box, and to remove the IP address from the list. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 131: Diagnostics

    Click the Diagnostics link to view a menu of sub-topics: System Command, View Log File, Troubleshooting Mode, Active Profile Lookup, and Admin Audit Trail. Fig. 2:1-26 System screen, Diagnostics menu , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 132: System Command Window

    Command is selected from the Diagnostics menu. This window is used for viewing server statistics and for performing diagnostic tests on the server. Fig. 2:1-27 System Command window WARNING: Diagnostics tools utilize system resources, impacting the R3000’s performance. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 133: Perform A Diagnostic Test, View Data

    If “Ping” or “Trace Route” was selected from the pull- down menu, a blank field displays to the right and must be populated. 2. Click Execute to open a pop-up window containing the query results: Fig. 2:1-28 System Command, Results window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 134: Command Selections

    Ping The Ping diagnostic tool is used for verifying whether the R3000 can communicate with a machine at a given IP address within the network, and the speed of the network connection. Enter the IP address or host name of the specific Internet address to be contacted (pinged), and then click Execute to display results in the pop-up window.

  • Page 135: Top Cpu Processes

    When Routing Table is selected and Execute is clicked, information about available routes and their statuses displays in the pop-up window. Each route consists of a destination host or network and a gateway to use in forwarding packets. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 136: Current Memory Usage

    The Recent Logins diagnostic tool is used for showing infor- mation on administrator login activity. When Execute is clicked, the pop-up window displays a row of data for each time an administrator logged on the R3000 server. , R3000 E ECHNOLOGIES...

  • Page 137: View Log File Window

    The View Log File window displays when View Log File is selected from the Diagnostics menu. This window is used for viewing the most recent log file results of various activi- ties and for troubleshooting. Fig. 2:1-29 View Log File window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 138: View Log Results

    NIC card. • “Admin GUI Server Log (AdminGUIServer.log)” - used for viewing information on entries made by the admin- istrator in the R3000 console. NOTE: For information about the “Wbwatch Log (wbwatch.log)”, “Authentication Log (AuthenticationServer.log)”, “eDirectory Agent Debug Log (edirAgent.log)”, “eDirectory Agent Event Log (edirEvent.log)”...
  • Page 139 1: S LOBAL DMINISTRATOR ECTION HAPTER YSTEM SCREEN Fig. 2:1-30 View Log File, Results window 4. Click the “X” in the upper right corner of the pop-up window to close it. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 140: Troubleshooting Mode Window

    Fig. 2:1-31 Troubleshooting Mode window WARNING: This tool utilizes system resources, impacting the R3000’s performance. When you click Enable, the R3000 will stop filtering the network. After you finish making the necessary changes to the server, be sure to click Disable to terminate your Troubleshooting Mode session.

  • Page 141: Use The Troubleshooting Mode

    (TCP); Address Resolution Protocol (ARP); packets destined to a specified port (80, 443, 81); packets destined to the R3000; packets sent to or from port 20 or 21; or packets sent to the Virtual IP address’s port 137 or 139.

  • Page 142: Active Profile Lookup Window

    LOBAL DMINISTRATOR ECTION HAPTER YSTEM SCREEN 8. After performing the fixes on the R3000 server, return to this window and click Disable to resume filtering the network. Active Profile Lookup window The Active Profile Lookup window displays when Active Profile Lookup is selected from the Diagnostics menu. This window is used for verifying whether a user has an active profile.This window also is used for troubleshooting...

  • Page 143: Verify Whether A Profile Is Active

    YSTEM SCREEN NOTE: In order to use this diagnostic tool, IP groups and/or members must be set up in the Group section of the R3000, and each IP group and/or member must have a filtering profile. MAC addresses are used in the mobile mode only.
  • Page 144 At the bottom of the Rule Details frame, Uncategorized Sites are set to either “Pass” or “Block”, indicating that the selected setting applies to any non-classified URL. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
  • Page 145 Safe Search Enforcement”, “Search Engine Keyword Filter Control”, and/or “URL Keyword Filter Control” with/without the “Extend URL Keyword Filter Control” option selected. 3. Click the “X” in the upper right corner of the pop-up box to close it. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 146: Admin Audit Trail Window

    FTP server. The log of changes made on the server can be viewed in this window. Admin Audit Trail The Admin Audit Trail tab displays by default: Fig. 2:1-34 Admin Audit Trail window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 147: Specify Ftp Criteria

    6. Specify whether or not to Send Daily Log to FTP Server by clicking either the “on” or “off” radio button. 7. Click Apply to apply your settings. FTP the Log on Demand Click FTP Now to transfer the log on demand. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 148: View

    (Time), IP address of the machine used by the administrator, administrator's User- name, and a brief description of the Action performed on the server. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 149: Alert

    Alert includes options for setting up alert emails that notify designated individuals of problems on the network. Click the Alert link to view a menu of sub-topics: Alert Settings, and SMTP Server Settings. Fig. 2:1-36 System screen, Alert menu , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 150: Alert Window

    R3000’s self-monitoring process. Fig. 2:1-37 Alert window The following processes are monitored by the R3000: • CPU Processes - If any CPU process fails to run, the R3000 alerts the administrator about the failed process, and that an attempt will be made to reload the necessary process.
  • Page 151 (ER). Action should be taken to prevent the hard drive from reaching 100 percent utilization. • Log File Transmission - If the R3000 is unable to send log files as scheduled to the 8e6 Enterprise Reporter, the log files are placed in a queue so they can be sent when a connection is established.

  • Page 152: Enable The Alert Feature

    4. If using an SMTP server for sending alert email messages to designated administrators, enter the email address of the R3000 in the From Email Address field. 5. Click Apply to apply your settings. Modify Alert Settings 1.

  • Page 153: Smtp Server Settings Window

    1. Enter the SMTP Server name, for example: mail.logo.com. 2. By default, the SMTP Server Port number used for sending email is 25. This should be changed if the sending mail connection fails. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 154: Verify Smtp Settings

    2. Enter the email address in the pop-up box. 3. Click OK to close the pop-up box and to process your request. If all SMTP Server Settings are accepted, the test email should be received at the specified address. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 155: Patch

    ECTION HAPTER YSTEM SCREEN Patch Patch includes options for uploading software updates. Click the Patch link to view a menu of sub-topics: Patch, and Patch Update Log. Fig. 2:1-40 System screen, Patch menu , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 156: Echnologies , R3000 Enterprise Ilter Ser Uide

    Fig. 2:1-41 Patch window NOTE: Available software updates for the R3000 come from downloads made to the server via Traveler, 8e6’s executable program that can run on demand, or be set to run at a scheduled time.

  • Page 157: Read Information About A Software Update

    HAPTER YSTEM SCREEN TIP: Click the link (“here”) at the bottom of the window to go to the Web page at 8e6 Technologies’ public site (http://www.8e6.com/ products/R3000/patches/r3000_patches.htm) where release notes about software updates can be obtained. Read Information about a Software Update...

  • Page 158: Select And Apply A Software Update

    Be sure port 8082 is open on your network. 2. Click Apply to open the software update installation dialog box: Fig. 2:1-43 Software update installation dialog box 3. Click Yes to open the EULA dialog box: Fig. 2:1-44 EULA dialog box , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 159 6. Click OK to close the alert box. 7. In the navigational bar, click Quit to exit the R3000 console, and also close the R3000 Introductory Window. 8. Wait a few minutes, and then log back into the R3000 console again. , R3000 E...

  • Page 160: Undo An Applied Software Update

    To unapply a software update: 1. Go to the History of Patches frame and select the soft- ware update to be unapplied. 2. Click Undo. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 161: Patch Update Log Window

    The Patch Update Log window displays when Patch Update Log is selected from the Patch menu. This window is used for viewing the software update log that provides the status on the R3000’s software update activity, including checks for new software updates, and downloaded and applied software updates.

  • Page 162: Download Log, View, Print Contents

    • In the File Download dialog box, click Save: Fig. 2:1-48 Download Log dialog box This action opens the Save As window: Fig. 2:1-49 Save As pop-up window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 163 5. Click OK to close the alert box asking you to verify that the software update log file was successfully saved to your machine. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 164: View The Contents Of The Log

    Fig. 2:1-51 Folder containing downloaded file 2. Choose “Open With” and then select a zip file executable program such as “WinZip Executable” to launch that application: Fig. 2:1-52 WinZip Executable program , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 165 3. If using WinZip, click I Agree to open the window containing the zip file: Fig. 2:1-53 WinZip window 4. Right-click the zip file to open the pop-up menu, and choose “View” to open the View dialog box: Fig. 2:1-54 View dialog box , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 166: Save, Print The Log File Contents

    • in Windows 2000: Start > Programs > Accessories > Notepad 3. Paste the contents from the clipboard into the Notepad file. The correctly formatted Notepad file can now be saved and/or printed. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 167: Synchronization

    Synchronization By default, the Synchronization pop-up menu includes the Setup option that lets you specify the R3000 server’s func- tion on the network: whether it will be a stand alone box, or whether it will send profile/library setting changes to—or receive such setting changes from—another R3000.

  • Page 168: Setup Window

    The Setup window displays when Setup is selected from the Synchronization menu. This window is used for establishing the function of the R3000, especially if there is more than one R3000 on the network. When there are multiple R3000 servers, it is important to set up one as a "source" server and others as "targets,"...

  • Page 169: Using Only One R3000 On The Network

    R3000 (“target”) servers. WARNING: If an R3000 server is set up in the Source mode with a Network Address Translation (NAT) device between the source and target server(s), be sure that ports 26262, 26268, and 88 are open on the source server.
  • Page 170 3. In the IP to Send frame, select either the LAN 1 or LAN 2 IP address from the IP to Send pull-down menu. This IP address will be used for sending profile/library setting changes to the target server(s). , R3000 E ECHNOLOGIES NTERPRISE ILTER...
  • Page 171 4. In the Target IPs frame, enter the Target IP address of the R3000 server that will receive profile/library setting changes from this server being configured. NOTE: If a target server is set up with a NAT device, the NAT IP address must be used instead of the target server’s own IP...

  • Page 172: Sync All Target Servers With The Same Settings

    Two scenarios in which this feature might be used involve restoring backup data to the R3000 server: • In the first scenario, library configurations from a previous date in time are restored to the source server, and each target server needs to have these same library configurations as well.

  • Page 173: Set Up An R3000 To Be A Target Server

    An R3000 configured to be a target server will receive profile/library setting changes from the source server only. WARNING: If an R3000 server is set up in the Target mode with a NAT device between the target and source server, be sure that ports 26262 and 26268 are open on the target server.
  • Page 174 NOTE: This test only verifies whether this server can contact the source server. In order for synchronization to be operable on the network, the source server must also be able to contact this target server being configured. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 175: Status Window

    Fig. 2:1-60 Status window, Source mode If set up in the Target mode, this window is used for verifying that profile/library setting updates are being received from the source server. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 176: View The Sync Status Of Targets From The Source

    YSTEM SCREEN View the Sync Status of Targets from the Source If the server is set up in the Source mode, the R3000 System Time displays at the top of the Target(s) Status frame. This is the current date and time from the R3000 server—using the YYYY/MM/DD and HH:MM:SS format—...

  • Page 177: View Items In The Queue

    1. In the Current Queue column for that server, click Details to open the Queue of Target pop-up window: Fig. 2:1-61 Queue of Target pop-up window 2. Click Close to close the pop-up window. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 178: View Items Previously Synced To The Server

    Fig. 2:1-62 History of Target pop-up window 4. Click Close to close the pop-up window. Place Items in Queue for Syncing To place new sync items in queue for the target server(s), click Test Sync. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 179: View The Sync Status Of The Target Server

    YSTEM SCREEN View the Sync Status of the Target Server If the server is set up in the Target mode, the R3000 System Time displays above the Target Sync Status frame. This is the current date and time from the R3000 server—using the YYYY/MM/DD and HH:MM:SS format—and includes the...
  • Page 180 • History Log - Click the Details button to open the History of Target pop-up window. See View Items Previ- ously Synced to the Server in this section for information on accessing and viewing the contents of this window. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 181: Mode

    ECTION HAPTER YSTEM SCREEN Mode Mode includes options for configuring the R3000 to filter the network. Click the Mode link to view a menu of sub-topics: Operation Mode and Proxy Environment Settings. Fig. 2:1-64 System screen, Mode menu , R3000 E...

  • Page 182: Operation Mode Window

    Mode is selected from the Mode menu. This window is used for specifying the operational mode in which the R3000 will filter the network, and the settings the R3000 will use for “listening to” traffic and sending traffic. Fig. 2:1-65 Operation Mode window...

  • Page 183: Set The Operation Mode

    The default Mode setting is “Invisible”. To change this setting, click the radio button corresponding to “Router”, “Firewall”, or “Mobile”—the latter if this R3000 will only be used for filtering end users who have the 8e6 Mobile Client installed on their workstations.

  • Page 184: Invisible Option: Specify The Block Page Delivery

    • “Send Block to Specified Host MAC Address” - using this preferred method, the block page will always be sent to the MAC address of a specified host, usually the R3000 gateway. Using this option, choose from either of the two Block Page Route To selections: •...

  • Page 185: Mobile Option: Specify The Mobile Client Control

    R3000 to resynchronize the profile on the end user's workstation with the profile set up for him/her on the internal R3000. By default, 60 minutes displays. NOTES: The following features are not available when using the...

  • Page 186: Proxy Environment Settings Window

    Proxy Environment Settings is selected from the Mode menu. This window is used for specifying whether the R3000 is in a proxy environment, and if the default Web server port number 80 will be enabled. Fig. 2:1-66 Proxy Environment Settings window NOTE: Basic Proxy Authentication must be used if using HTTPS in a proxy environment.

  • Page 187: Use A Local Proxy Server

    1. Click the “On” radio button. This selection indicates that the R3000 will perform a reverse lookup on packets to detect the source address and origin of packets. 2. Click Apply to apply your setting.

  • Page 188: Authentication

    DMINISTRATOR ECTION HAPTER YSTEM SCREEN Authentication Authentication includes options for configuring the R3000 to authenticate and re-authenticate users on the network. Click the Authentication link to view a menu of sub-topics: Enable/Disable Authentication, Authentication Settings, and Authentication SSL Certificate. Fig. 2:1-67 System screen, Authentication menu NOTES: Information about these sub-topics can be found in the R3000 Authentication User Guide.

  • Page 189: Nic Mode

    The NIC Mode window displays when NIC Mode is selected from the navigation panel. This window lets you specify the speed for the R3000’s Network Interface Card settings so that the R3000 can communicate with the network switch or hub. Fig. 2:1-68 NIC Mode window By default the NIC mode for LAN1 and LAN2 is set to “Auto”.

  • Page 190: View The Nic Negotiation

    HAPTER YSTEM SCREEN NOTE: The options available in this window depend on the hard- ware components installed for the R3000 unit. View the NIC Negotiation To verify or correct the negotiation for a NIC, click View NIC Negotiation to open a window containing results from the mii-tool and the ethtool about the status of the NIC mode(s): Fig.

  • Page 191: Modify The Nic Mode Setting

    YSTEM SCREEN Modify the NIC Mode Setting WARNING: If changing the NIC mode, be sure the hub/switch to which the R3000 is connected will support the selected NIC mode. An incorrect setting may prevent you from accessing the R3000 console.

  • Page 192: Nic Mode Speeds Chart

    1: S LOBAL DMINISTRATOR ECTION HAPTER YSTEM SCREEN NIC Mode Speeds Chart Below are charts of NIC speeds for various R3000 models: Year 2008 Models LAN1 LAN2 R3000 HL platform 10, 100, 1000 10, 100, 1000 R3000 SL platform 10, 100, 1000...

  • Page 193: Backup/Restore

    Fig. 2:1-70 Backup/Restore window WARNING: A backup should be created and downloaded off the R3000 server whenever a change is made to filtering settings on the R3000 server. , R3000 E ECHNOLOGIES...

  • Page 194: Backup Procedures

    These backup files can be uploaded to a new server, eliminating the need to re- enter the same settings from the old R3000 in the console of the new R3000. NOTE: See Server Maintenance Procedures from the Introduc- tory Section’s Chapter 3: Synchronizing Multiple Units, for an...

  • Page 195: Perform A Backup

    To back up configuration and/or library modifications: 1. In the Backup frame, click the Configuration and/or Library checkbox(es) as appropriate. 2. Click Backup to open the R3000 Backup dialog box: Fig. 2:1-71 R3000 Backup dialog box 3. Type in the Filename for the backup file.

  • Page 196: Download A File

    This action opens the Save As window: Fig. 2:1-73 Save As pop-up window 4. Find the folder in which to save the file, and then click Save to begin downloading the “.gz” file to your worksta- tion. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 197 After the file has completely downloaded, the Download complete dialog box opens: Fig. 2:1-74 Download complete box You can now open this file, open the folder where the file was saved, or close this dialog box. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 198: Perform A Restoration

    WARNING: Be sure the file you are restoring uses the same version of the software currently used by the R3000 Administrator console. Refer to the Patch window for available updates to the R3000’s software. (See the Patch window for more information about software updates.)

  • Page 199: Restore Configurations To The Server

    Backup Configurations grid. Restore Configurations to the Server To restore configurations or library modifications from a previous backup: 1. Select the file from the Backup Configurations grid. 2. Click Restore to overwrite the current settings. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 200: Remove A Backup File

    The following information displays for each row: the date and time a process was attempted to be executed, and a Message indicating whether that process succeeded or failed. 2. Click OK to close the pop-up box. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 201: Reset

    LOBAL DMINISTRATOR ECTION HAPTER YSTEM SCREEN Reset Reset window The Reset window displays when Reset is selected from the navigation panel. This option is not available on the R3000IR. Fig. 2:1-78 Reset window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 202: Radius Authentication Settings

    NOTE: The Radius Authentication Settings topic does not display if the synchronization feature is used, and this server being configured is set up in the Target mode to synchronize both profile and library setting changes. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 203: Enable Radius

    • Click the radio button corresponding to Host Byte Order to use the byte order stored in the server (big endian or little endian order). NOTE: The byte order should match the setting on the Radius accounting server. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 204: Apply Settings

    Radius accounting server. • Check the box for Use R3000 IP as Source IP, if the IP address of the R3000 server (LAN1 or LAN2) should be used when forwarding packets instead of the IP address of the NAS.

  • Page 205: Disable Radius

    1: S LOBAL DMINISTRATOR ECTION HAPTER YSTEM SCREEN Disable Radius To disable the Radius feature: 1. At the Radius Mode field, click the “Off” radio button. 2. Click Apply. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 206: Snmp

    This feature lets the global adminis- trator use a third party Simple Network Management Protocol (SNMP) product for monitoring and managing the working status of the R3000's filtering on a network. Fig. 2:1-80 SNMP window The following aspects of the R3000 are monitored by...

  • Page 207: Enable Snmp

    Enter the password to be used as the Community token for public access. This is the password that the manage- ment R3000 console would use when requesting access. Create, Build the Access Control List 1. In the Enter new IP to add field, enter the IP address of an interface from/to which the SNMP should receive/ send data.

  • Page 208: Hardware Failure Detection

    Hardware Failure Detection window The Hardware Failure Detection window displays when Hardware Failure Detection is selected from the navigation panel. This option is not available on the R3000IR. Fig. 2:1-81 Hardware Failure Detection window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 209: Strikes Blocking

    (“X”) number of attempts to such sites. “‘Unacceptable’ Internet sites” pertain to sites included in categories that are blocked in a user’s profile. Fig. 2:1-82 X Strikes Blocking window, Configuration tab , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 210: Configuration

    4 seconds. 5. Specify the “Locked” Life Time (Measured in Minutes), which is the number of minutes a user's work- station will be locked. Choose either “Unlimited”, or “Defined”. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 211: Reset All Workstations

    • Click Unlock All Locks to remove locks on all locked workstations. Lock Page A user who receives the final strike that locks him/her out the workstation will see the following lock page display on the screen: , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 212 Defined amount of time specified in the “Locked” Life Time field passes, or unless an authorized staff member manually unlocks that user’s workstation (see Go to X Strikes Unlock Workstation GUI in this section). , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 213: Overblocking Or Underblocking

    If the configuration settings for this example overblock too many users too frequently: • the time span for the maximum number of strikes may need to be increased • the maximum number of strikes may need to be increased , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 214: Email Alert

    • the maximum number of strikes may need to be reduced Email Alert Click the Email Alert tab to display Email Alert: Fig. 2:1-84 X Strikes Blocking window, Email Alert tab , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 215: Set Up Email Alert Criteria

    Daily Schedule pop-up window that shows the alert time schedule in the (HH:MM:SS) format: Fig. 2:1-85 The Daily Schedule pop-up window Click Close to close the pop-up window. 3. Click Save to save the field entries. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 216: Set Up Email Alert Recipients

    Remove Email Alert Recipients 1. Select the email address(es) from the Current Email Alerts list box. 2. Click Delete to remove the email address(es) from list. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 217: Logon Accounts

    Password fields, using eight to 20 characters and at least one alpha character, one numeric character, and one special character. The password is case sensitive. 3. Click Add to include the ID in the Current Accessible Users list box. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 218: Deactivate An Authorized Logon Account

    (See Chapter 4: Reporting screen, Real Time Probe for information on setting up and using real time probes.) , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 219: Categories

    2. Click the right arrow (>) to move the selected library cate- gories to the “Strike” Categories list box. TIP: Use the left arrow (<) to move selected “Strike” Categories to the “No Strike” Categories list box. 3. Click Apply to apply your settings. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 220: Go To X Strikes Unlock Workstation Gui

    The Re-login window opens if the user’s session needs to be validated: Fig. 2:1-88 Re-login window 1. Enter your Username. 2. Enter your Password. 3. Click OK to close the Re-login window and to re-access the R3000 console. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 221: Strikes Unlock Workstation

    NOTE: An authorized staff member can click a link in an email alert, or type in http://x.x.x.x:88/XStrike.html in the address field of a browser window—in which “x.x.x.x” is the IP address of the R3000—to view locked workstation criteria. Unlock a Workstation To unlock a specified workstation: 1.

  • Page 222: Set Up An Email Address To Receive Alerts

    1. Enter the email address in the Email Address to be Subscribed/Unsubscribed text box. 2. Click Unsubscribe. Close the Pop-up Window Click the “X” in the upper right corner of the pop-up window to close the window. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 223: Warn Option Setting

    URL with a Warn setting. Fig. 2:1-90 Warn Option Setting window , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 224: Specify The Interval For Re-Displaying The Warn Page

    1. In the Warn Life Time (minutes) field, by default 10 displays. Enter the number of minutes (1-480) to be used in the interval for re-displaying the warning page for the end user. 2. Click Apply to enable your setting. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 225: Customization

    NOTE: All Customization windows display greyed-out if the synchronization feature is used, and this server being configured is set up in the Target mode to synchronize both profile and library setting changes. Fig. 2:1-91 System screen, Customization menu , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 226: Common Customization Window

    LOBAL DMINISTRATOR ECTION HAPTER YSTEM SCREEN NOTE: Refer to the R3000 Authentication User Guide for infor- mation on using the Authentication Form Customization window. Common Customization window The Common Customization window displays when Common Customization is selected from the Customization menu.

  • Page 227: Enable, Disable Features

    • Blocked URL Display - if enabled, displays “Blocked URL” followed by the blocked URL in block pages • Copyright Display - if enabled, displays 8e6 R3000 copyright information at the footer of block and lock pages, and the authentication request form •...
  • Page 228 Enter the global administrator's email address. 2. Click Apply to save your entries. TIP: Click Restore Default to revert to the default settings. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 229: Lock Page Customization Window

    X Strikes Blocking feature is enabled. NOTE: See X Strikes Blocking window in this chapter for informa- tion on using the X Strikes Blocking feature. Fig. 2:1-93 Lock Page Customization window , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 230: Edit Entries, Setting

    Preview Sample Lock Page 1. Click Preview to launch a separate browser window containing a sample customized lock page, based on entries saved in this window and in the Common Customization window: , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 231 Support page that explains why access to the site or service may have been denied. • 8e6 Technologies - Clicking this link takes the user to 8e6’s Web site. 2. Click the “X” in the upper right corner of the window to close the sample customized lock page.

  • Page 232: Block Page Customization Window

    Common Customization window. Fig. 2:1-95 Block Page Customization window NOTE: See Appendix C: Create a Custom Block Page for infor- mation on creating a customized block page using your own design. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 233: Add, Edit Entries

    Preview Sample Block Page 1. Click Preview to launch a separate browser window containing a sample customized block page, based on entries saved in this window and in the Common Customization window: , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 234 By default, the following standard links are included in the block page: • HELP - Clicking this link takes the user to 8e6’s Tech- nical Support page that explains why access to the site or service may have been denied. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 235 DMINISTRATOR ECTION HAPTER YSTEM SCREEN • 8e6 Technologies - Clicking this link takes the user to 8e6’s Web site. By default, these links are included in the block page under the following conditions: • For further options, click here. - This phrase and link...

  • Page 236: Warn Page Customization Window

    Warn setting is applied to any library category or category group. NOTE: See Warn Option Setting window in this chapter for more information about this feature. Fig. 2:1-97 Warn Page Customization window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 237: Add, Edit Entries

    Preview Sample Warning Page 1. Click Preview to launch a separate browser window containing a sample customized warning page, based on entries saved in this window and in the Common Customization window: , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 238 By default, the following standard links are included in the warning page: • HELP - Clicking this link takes the user to 8e6’s Tech- nical Support page that explains why access to the site or service may have been denied. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 239 DMINISTRATOR ECTION HAPTER YSTEM SCREEN • 8e6 Technologies - Clicking this link takes the user to 8e6’s Web site. The following buttons are included in the warning page: • Continue - Clicking this button closes the warning page and takes the user to the URL he/she requested.

  • Page 240: Profile Control Window

    Common Customization window, and override accounts are set up for designated end users. NOTE: See Override Account window in the Group section for more information about this feature. Fig. 2:1-99 Profile Control window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 241: Edit Entries

    TIP: Click Restore Default to revert to the default settings in this window. NOTE: For a sample profile control pop-up window, see Option 3 from the Options page section of the Block Page Authentication window. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 242: Chapter 2: Group Screen

    For the NT and LDAP domain branches, the global adminis- trator must first set up authentication in order to enable the NT/LDAP branch(es). For each domain, the administrator , R3000 E ECHNOLOGIES NTERPRISE ILTER...
  • Page 243 Information on creating filtering profiles for IP groups can be found in the Group Administrator Section of this user guide. If using the synchronization feature, if the R3000 server being configured is set up in the Target mode to synchronize both profile and library setting changes, the only branch that displays in the tree is Global Group.

  • Page 244: Global Group

    Filtering Level, and Refresh All. Fig. 2:2-2 Group screen, Global Group menu NOTE: If the synchronization feature is used and this R3000 being configured is set up in the Target mode to synchronize both profile and library setting changes, the only sub-topic that displays is Range to Detect.

  • Page 245: Range To Detect Window

    Detect is selected from the Global Group menu. This window is used for defining segments of network traffic to be detected by the R3000 in the invisible or router mode. Service ports that should be open—ignored by the R3000— are also defined in this window.

  • Page 246: Add A Segment To The Network

    Add a Segment to the Network To add a segment to be detected on the network: 1. Click Add to go to the next page: Fig. 2:2-4 Range to Detect Settings, second window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 247 • Advanced Settings - clicking this button takes you to the Range to Detect Advanced Settings window. Follow the instructions in the Range to Detect Advanced Settings sub-section to complete the addi- tion of the segment on the network. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 248: Range To Detect Setup Wizard

    Fig. 2:2-5 Range to Detect Setup Wizard, Step 1 Since the first four pages of the Wizard contain the same fields and buttons, instructions provided for this step are not repeated for Steps 2 - 4. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
  • Page 249 Remove. 3. Click Next to go to the next page of the Wizard. NOTE: Click Cancel to be given the option to return to the main Range to Detect Settings window. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
  • Page 250 NOTE: By making entries in Destination IP fields, traffic will be restricted to the range specified in the Source IP and Destination IP frames. This reduces the load on the R3000, thus enabling it to handle more traffic. Fig. 2:2-6 Range to Detect Setup Wizard window, Step 2 NOTE: For Steps 2-6, click Back to return to the previous page of the Wizard.
  • Page 251 LOBAL DMINISTRATOR ECTION HAPTER ROUP SCREEN Step 3: Optional In this step you define the source IP address(es) to be excluded from filtering. Fig. 2:2-7 Range to Detect Setup Wizard window, Step 3 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 252 NOTE: By making entries in Destination IP fields, traffic will be restricted to the range specified in the Source IP and Destination IP frames. This reduces the load on the R3000, thus enabling it to handle more traffic. Fig. 2:2-8 Range to Detect Setup Wizard window, Step 4...
  • Page 253 2. Click Add to include the entry in the list box above. NOTE: To remove the port number, select it from the list box and click Remove. 3. Click Next to go to the last page of the Wizard. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
  • Page 254 • click the Modify button to the right of the list box if you need to make changes. This action takes you to that page of the Wizard where you make your edits. Click Next until you return to Step 6. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 255: Range To Detect Advanced Settings

    Click the Advanced Settings button to display the Range to Detect Advanced Settings window: Fig. 2:2-11 Range to Detect Advanced Settings window 1. Enter the settings in the list box, using the correct syntax. Refer to the examples above. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 256: Modify A Segment Of The Network

    Remove a Segment from the Network To remove a segment: 1. In the main Range to Detect Settings window (see Fig. 2:2-3), select the segment from the Current Ranges list box. 2. Click Remove. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 257: Rules Window

    “Rule4 8e6 CIPA Compliance” (which pertains to the Chil- dren’s Internet Protection Act), and the “Block All” rule. By default, “Rule1” displays in the Rule # field, “BYPASS” displays in the Rule Description field, and Uncategorized Sites are allowed to Pass. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 258: Add A Rule

    The end user can view the URL after seeing a warning message and agreeing to its terms. • Block - URLs in this category will be blocked. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 259: Modify A Rule

    After a rule is added, it can later be modified. To make changes to a rule: 1. Select the rule from the Current Rules pull-down menu. 2. Make your modifications. 3. Click Modify Rule. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 260: Remove A Rule

    Current Rules list. Remove a Rule To delete a rule: 1. Select the rule from the Current Rules pull-down menu. 2. Click Delete Rule. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 261: Global Group Profile Window

    Category, Port, Default Redirect URL, and Filter Options. Entries in these tabs comprise the profile string for the global group. Fig. 2:2-13 Global Group Profile window, Category tab , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 262: Category Profile

    • Warn - URLs in this category will warn the end user that the URL he/she requested can be accessed, but may be against the organization’s policies. The end user can view the URL after seeing a warning message and agreeing to its terms. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 263 2. Click the “Pass”, “Warn”, or “Block” radio button to specify whether all Uncategorized Sites should pass, trigger a warn message for the end user, or be blocked. 3. Click Apply to apply your settings at the global level. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 264: Port

    ROUP SCREEN Port Port displays when the Port tab is clicked. This tab is used for blocking access to specified ports for the global filtering profile. Fig. 2:2-14 Global Group Profile window, Port tab , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 265: Create, Edit A List Of Service Ports

    3. Click Apply to apply your settings at the global level. To remove a port number from the list box: 1. Select the port number. 2. Click Remove. 3. Click Apply to apply your settings at the global level. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 266: Default Redirect Url

    Fig. 2:2-15 Global Group Profile window, Default Redirect URL tab Create, Edit the Redirect URL 1. Specify the type of redirect URL to be used: “Default Block Page”, “Authentication Request Form”, or “Custom URL”. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 267: Filter Options

    Filter Options displays when the Filter Options tab is clicked. This tab is used for specifying which filter option(s) will be applied to the global group filtering profile. Fig. 2:2-16 Global Group Profile window, Filter Options tab , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 268: Create, Edit The Filter Options

    NOTE: See the X Strikes Blocking window in Chapter 1: System screen for information on setting up the X Strikes Blocking feature. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 269 Google or Yahoo! images returned by the query to load on the page. The user will receive only one strike if all inappropriate images load within the tolerance time range of a given strike. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
  • Page 270 • 8e6 Supplied Categories - see Chapter 3: Library screen, Search Engine Keywords window in this section. • Custom Categories - see the Group Administrator Section, Chapter 2: Library screen, Search Engine Keywords window. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
  • Page 271 URLs that are not even within blocked catego- ries. For example, if all URL keywords containing “sex” are blocked, users will not be able to access a non-pornographic site such as http://www.essex.com. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 272: Override Account Window

    NT, LDAP, or IP group user to bypass settings at the minimum filtering level. A user with an override account will be able to access categories and service ports blocked at the minimum filtering level. Fig. 2:2-17 Override Account window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 273: Add An Override Account

    (See Category Profile, Redirect URL, and Filter Options in this sub-section for information on the Rule, Redirect, and Filter Options tabs.) 6. Click Apply to activate the override account. 7. Click Close to close the pop-up window. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 274: Category Profile

    Category Groups tree. TIP: In the Category Groups tree, double-click the group enve- lope to open that segment of the tree and to view library catego- ries belonging to that group. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 275 3. Click the “Pass”, “Warn”, or “Block” radio button to specify whether all Uncategorized Sites should pass, trigger a warn message for the end user, or be blocked. 4. Click Apply to apply your settings to the override account profile. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 276: Redirect Url

    Fig. 2:2-19 Override Account pop-up window, Redirect tab 1. Specify the type of redirect URL to be used: “Default Block Page”, “Authentication Request Form”, or “Custom URL”. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 277: Filter Options

    Override Account window. Filter Options The Filter Options tab is used for specifying which filter option(s) will be applied to the override account profile. Fig. 2:2-20 Override Account pop-up window, Filter Options tab , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 278 Search engine keywords are entered in the Search Engine Keywords window of 8e6 supplied library categories and custom library categories. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 279 Chapter 2: Library screen, URL Keywords window. 2. Click Apply to apply your settings to the override account profile. 3. Click Close to close the pop-up window and to return to the Override Account window. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 280: Edit An Override Account

    3. Click the tab in which to make modifications (Rule, Redi- rect, Filter Options). 4. Make your edits in this tab and in any other tab, if neces- sary. 5. Click Apply. 6. Click Close to close the pop-up window. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 281: Delete An Override Account

    2: G LOBAL DMINISTRATOR ECTION HAPTER ROUP SCREEN Delete an Override Account To delete an override account: 1. In the Current Accounts frame, select the username from the list box. 2. Click Remove. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 282: Upload/Download Ip Profile Window

    Group menu. This window is used for uploading or down- loading a text file containing filtering profiles of multiple users, groups, or MAC addresses. Fig. 2:2-21 Upload IP Profiles window NOTE: MAC addresses are only used in the mobile mode. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 283: Upload Ip Profiles

    “Upload IP Profiles Successfully.” 4. Click the “X” in the upper right corner of the Upload IP Profiles pop-up window to close it. 5. Click Reload Now to reload the new profiles. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 284: Download Profile

    Fig. 2:2-23 Download IP Profiles window The contents of this window can viewed, printed, and/or saved. 2. Click the “X” in the upper right corner of the window to close it. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 285: Minimum Filtering Level Window

    Category tab is clicked. This tab is used for making selections from the list of 8e6 supplied library categories, and specifying whether each of these selected categories will be opened or blocked at the minimum filtering level. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 286 Pass or Block column. TIP: In the Category Groups tree, double-click the group enve- lope to open that segment of the tree and to view library catego- ries belonging to that group. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 287: Create, Edit Minimum Filtering Categories

    Shift key on your keyboard while clicking the last category, and then double- clicking in the appropriate column. 2. Click Apply to apply your settings for the minimum filtering level. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 288: Port

    1. Enter the port number in the Port field. 2. Click Add. Each port number you add displays in the Block Port(s) list box. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 289 3. Click Apply to apply your settings at the minimum filtering level. To remove a port number from the list box: 1. Select the port number. 2. Click Remove. 3. Click Apply to apply your settings at the minimum filtering level. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 290: Minimum Filtering Bypass Options

    NOTE: See the Override Account window and Exception URL window of the Group screen in the Group Administrator Section of this user guide for information on setting up an override account and exception URLs. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 291: Specify Minimum Filtering Bypass Options

    URLs blocked at the minimum filtering level are set up to be accessed by users. 2. Click Save to apply your settings. (See the Exception URL window in the Group Administrator Section for more information.) , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 292: Refresh All

    If authentication is enabled, when Refresh All is clicked, the NT and LDAP branches of the tree display. When authenti- cation is disabled, when Refresh All is clicked only the IP branch of the tree displays. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
  • Page 293 IP includes options for adding a master IP group and to refresh the tree list. Click the IP link to view a menu of sub- topics: Add Group, and Refresh. Fig. 2:2-27 Group screen, IP menu , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 294: Add Group

    3. Enter the Password, and re-enter it in the Confirm Password field, using eight to 20 characters and at least one alpha character, one numeric character, and one special character. The password is case sensitive. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 295: Refresh

    Group Administrator Section of this user guide. Refresh Refresh IP Groups From the IP group menu, click Refresh whenever changes have been made in this branch of the tree. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 296: Chapter 3: Library Screen

    Module, Category Weight System, NNTP Newsgroup, and Category Groups. NOTE: If the synchronization feature is used, an R3000 set up in the Target mode to synchronize both profile and library setting changes will only display the Updates, Library Lookup, Customer Feedback Module, and NNTP Newsgroup topics.
  • Page 297 8e6 supplied library categories. See Appendix B for information on messages that display in the Library Update Log window. Instant Messaging library categories only include Library Details and URLs sub-topics. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 298: Updates

    Click the Updates link to view a menu of sub-topics: Configuration, Manual Update, Addi- tional Language Support, Library Update Log, and Emer- gency Update Log. Fig. 2:3-2 Library screen, Updates menu , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 299: Configuration Window

    Configuration window The Configuration window displays when Configuration is selected from the Updates menu. This window is used for making settings to allow the R3000 to receive 8e6 supplied library category updates on a daily basis. Fig. 2:3-3 Configuration window Select the Transfer Protocol 1.

  • Page 300: Set A Time For Updates To Be Retrieved

    Log Level 1 includes a summary of library and software update activity. Log Level 2 includes detailed information on library and soft- ware update activity. 2. Click Apply to apply your settings. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 301: Manual Update Window

    This window is used for updating specified 8e6 supplied library categories on demand from the update server, if the R3000 has not received daily updates due to an occurrence such as a power outage. Fig. 2:3-4 Manual Update window NOTE: The Configuration window should be used for scheduling the R3000 to automatically download libraries on a daily basis.

  • Page 302: Specify The Type Of On Demand Update

    • Patch Update - Select this option to download new software updates for the R3000, if available. Any soft- ware updates that are downloaded can be found in the System section of the console, in the Patch window.

  • Page 303: Additional Language Support Window

    1. Make a selection from the Unselected Languages list box and click the right arrow to move that selection to the Selected Languages list box. 2. Once the Selected Languages list box is populated, the (Optional) Select Primary Language pull-down menu , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 304 TIP: To move a language selection back to the Unselected Languages list box, select the item and then click the left arrow. 3. Click Apply to have URLs from the selected language(s) included in the library categories. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 305: Library Update Log Window

    The Library Update Log window displays when Library Update Log is selected from the Updates menu. This window is used for viewing transfer activity of library updates from the update server to your R3000, and for downloading the activity log. Fig. 2:3-6 Library Update Log window...

  • Page 306: View The Library Update Process

    Click OK in this box after the download is completed. • In the File Download dialog box, click Save: Fig. 2:3-7 Download Log dialog box This action opens the Save As window: , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 307 NOTE: Proceed to View the Contents of the Log for information on viewing or printing the contents of the log file. 5. Click OK to close the alert box asking you to verify that the log file was successfully saved to your machine. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 308: View The Contents Of The Log

    Fig. 2:3-10 Folder containing downloaded file 2. Choose “Open With” and then select a zip file executable program such as “WinZip Executable” to launch that application: Fig. 2:3-11 WinZip Executable program , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 309 “View” to open the View dialog box: Fig. 2:2-13 View dialog box 5. Select “Internal ASCII text viewer”, and then click View to open the View window containing the log file contents: , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 310: Save, Print The Log File Contents

    OK to close the dialog box. 2. Open Notepad: • in Windows XP: Start > All Programs > Accessories > Notepad • in Windows 2000: Start > Programs > Accessories > Notepad , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 311 3: L LOBAL DMINISTRATOR ECTION HAPTER IBRARY SCREEN 3. Paste the contents from the clipboard into the Notepad file: Fig. 2:3-15 Notepad The correctly formatted Notepad file can now be saved and/or printed. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 312: Emergency Update Log Window

    Update Log is selected from the Updates menu. This window is used for viewing transfer activity of emergency software updates from the update server to your R3000, and for downloading the activity log. Fig. 2:3-16 Emergency Update Log window...

  • Page 313: View The Emergency Software Update Process

    NOTE: See Library Update Log window for information on viewing the contents of the log file, and printing and/or saving the log file contents. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 314: Library Lookup

    This window is used for verifying whether a URL or search engine keyword or keyword phrase exists in a library category, and to remove it, if necessary. Fig. 2:3-17 Library Lookup window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 315: Url Lookup, Removal

    3. Click OK to close the alert box and to display any results in the Result Category list box, showing the long name of the library category, followed by the URL. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 316: Remove A Url

    Once all changes have been made to library windows, click Reload Library to refresh. NOTE: Since reloading the library utilizes system resources that impact the performance of the R3000, 8e6 recommends clicking Reload Library only after modifications to all library windows have been made.

  • Page 317: Customer Feedback Module

    This window is used for enabling the Customer Feed- back Module feature, in which the most frequently visited non-categorized URLs in your R3000's filter log will be FTPed to 8e6 on a daily basis. The URLs collected by 8e6 will be reviewed and added to 8e6's standard library catego- ries, as appropriate, so they can be blocked.

  • Page 318: Disable Customer Feedback Module

    1. At the Customer Feedback Module - Auto Learning Feature field, click “On” to indicate that you wish to enable the Customer Feedback Module. 2. Click Apply to open the Disclaimer dialog box: Fig. 2:3-19 Disclaimer box , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 319 URLs collected by the Customer Feed- back Module and sent to 8e6 Technologies. At no time will any personal information collected be released publicly, nor will the Web request data be used for any...
  • Page 320 HAPTER IBRARY SCREEN Technologies’ Acceptable Use Policy or other user poli- cies; or to protect 8e6 Technologies and its Customers. “Your agreement to activate the Customer Feedback Module will be transmitted back to 8e6 Technologies once you click the ‘Accept’ button.”...

  • Page 321: Category Weight System

    This feature lets you choose which category will be logged and reported for a URL request that exists in multiple cate- gories (possibly both 8e6 supplied and custom library cate- gories) with the same operational precedence. Fig. 2:3-21 Category Weight System window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 322: View The Current Selections

    NOTE: If a URL exists in multiple un-weighted categories of the same operational precedence, the category logged would be the first one returned by the R3000 database. Since there is no precedence given, the order in which the category is returned would be random.

  • Page 323: Weighting Library Categories

    "weight" when ranked against other categories, based upon an end user’s URL request that appears in multiple library categories set up with the same operational precedence in the end user’s filtering profile. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 324: Nntp Newsgroup

    The NNTP Newsgroup window displays when NNTP News- group is selected from the navigation panel. This window is used for adding or removing a newsgroup from the libraries. Fig. 2:3-22 NNTP Newsgroup window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 325: Add A Newsgroup To The Library

    After all changes have been made to library windows, click Reload Library to refresh. NOTE: Since reloading the library utilizes system resources that impact the performance of the R3000, 8e6 recommends clicking Reload Library only after modifications to all library windows have been made.

  • Page 326: Category Groups

    8e6 supplied library categories. 8e6 supplied library categories are updated regularly with new URLs via Traveler, 8e6’s executable program that supplies updates to the R3000. Category Groups also contains the Custom Categories category group. Customized category groups and library categories must be set up and maintained by global or group administrators.
  • Page 327 Click the 8e6 supplied category link to view a menu of sub- topics: Library Details, URLs, URL Keywords, and Search Engine Keywords. (Menus for Instant Messaging library categories only include the sub-topics Library Details, and URLs). , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 328: Library Details Window

    This window is a view only window. Fig. 2:3-24 Library Details window View Library Details This window displays the Group Name, Description, and Short Name of the 8e6 supplied library category. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 329: Urls Window

    URLs ending in “.playboy.com”. A URL is used in a filtering profile for blocking a user’s access to a specified site or service. Fig. 2:3-25 URLs window, Action tab , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 330: View A List Of Urls In The Library Category

    2. Make a selection from the pull-down menu for “Addition List”, “Deletion List”, “Wildcard Addition List”, or “Wild- card Deletion List”. 3. Click View List to display the specified items in the Select List list box: Fig. 2:3-26 URLs window, View tab , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 331: Add Or Remove Urls, Reload The Library

    Ctrl key on your keyboard. Blocks of URLs can be selected by clicking the first URL, and then pressing the Shift key on your keyboard while clicking the last URL. 4. Click Apply Action. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 332: Add A Wildcard Url To The Library Category

    *.cnn.com is added to a category set up to be blocked, the end user will be able to access http://www.cnn.com since it is a direct match, but will not be able to access http://www.sports.cnn.com, since direct URL entries take precedence over wildcard entries. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 333: Remove A Url From The Library Category

    After all changes have been made to library windows, click Reload Library to refresh. NOTE: Since reloading the library utilizes system resources that impact the performance of the R3000, 8e6 recommends clicking Reload Library only after modifications to all library windows have been made.

  • Page 334: Url Keywords Window

    URL keywords can be added in this window but URL keyword filtering will not be in effect for the user(s). (See the Filter Options tab in the Group screen section for information about enabling URL keyword filtering.) , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 335: View A List Of Url Keywords

    1. Enter the Keyword in the Edit Keyword List frame. 2. Click Add. Remove a URL Keyword from the Library To remove a URL keyword from the library category: 1. Enter the Keyword in the Edit Keyword List frame. 2. Click Remove. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 336: Upload A List Of Url Keywords To The Library

    4. Click Upload File to upload this file to the server. NOTE: A URL keyword text file must contain one URL keyword per line. WARNING: The text file uploaded to the server will overwrite the current file. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 337: Upload A List Of Url Keyword Deletions

    After all changes have been made to library windows, click Reload to refresh. NOTE: Since reloading the library utilizes system resources that impact the performance of the R3000, 8e6 recommends clicking Reload only after modifications to all library windows have been made.

  • Page 338: Search Engine Keywords Window

    NOTE: Master lists cannot be uploaded to any 8e6 supplied library category. See the Custom Categories sub-section of the Group Administrator Section of this user guide for information on uploading a master list to the server. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 339: View A List Of Search Engine Keywords

    Add a Search Engine Keyword to the Library To add a search engine keyword/phrase to the library cate- gory: 1. In the Edit Search Keyword List frame, enter up to 75 alphanumeric characters in the Keyword field. 2. Click Add. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 340: Remove A Search Engine Keyword From The Library

    3. Click Upload File to upload this file to the server. NOTE: A search engine keywords text file must contain one keyword/phrase per line. WARNING: The text file uploaded to the server will overwrite the current file. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 341: Upload A List Of Search Engine Keyword Deletions

    After all changes have been made to library windows, click Reload to refresh. NOTE: Since reloading the library utilizes system resources that impact the performance of the R3000, 8e6 recommends clicking Reload only after modifications to all library windows have been made.

  • Page 342: Chapter 4: Reporting Screen

    Click Usage Graphs to display the Usage Graphs window, used for analyzing reports on daily peaks and trends of system usage. Click Shadow Log Format to specify the format in which R3000 logs will be sent to the ER. , R3000 E...

  • Page 343: Report Configuration

    Configuration is selected from the navigation panel. This window lets you perform a log transfer on demand. Fig. 2:4-2 Report Configuration window Transfer Logs to the ER Click Initiate to transfer logs from the R3000 to the ER. , R3000 E ECHNOLOGIES NTERPRISE...

  • Page 344: Real Time Probe

    Probe is selected from the navigation panel. This feature lets the probe administrator monitor a user's Internet usage in real time to see if that user is using the Internet appropri- ately. Fig. 2:4-3 Real Time Probe window, Configuration tab , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 345: Configuration

    Exclude an IP Address from Real Time Probing 1. Enter the Excluded IP Address of a machine to be bypassed from real time probing. 2. Click Add to add the IP address in the Current White list of IPs. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 346: Remove Ips From The White List

    EPORTING SCREEN Remove IPs from the White List 1. Select the IP address(es) from the Current White list of IPs list box. 2. Click Delete to remove the IP address(es) from the white list. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 347: Report Recipients

    “HTML” is selected. 2. Select the Maximum File Size of an Email Report (MB) that can be sent, from 1MB increments up to 20MB. The default is 5 MB. 3. Click Save. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 348: Set Up Email Addresses To Receive Reports

    Remove Email Addresses 1. Select the email address(es) from the Current List of Completed Reports to be Emailed list box. 2. Click Delete to remove the email address(es) from list. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 349: Logon Accounts

    Password fields, using eight to 20 characters and at least one alpha character, one numeric character, and one special character. The password is case sensitive. 3. Click Add to include the ID in the Current Accessible Users list box. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 350: Deactivate An Authorized Logon Account

    (See Chapter 1: System screen, X Strikes Blocking for information on reseting strikes and unlocking workstations.) , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 351: Go To Real Time Probe Reports Gui

    The Re-login window opens if the user’s session needs to be validated: Fig. 2:4-6 Re-login window 1. Enter your Username. 2. Enter your Password. 3. Click OK to close the Re-login window and to re-access the R3000 console. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 352: Real Time Probe Reports

    “x.x.x.x” is the IP address of the R3000—to only see probes he/she created. Create a Real Time Probe Click the Create tab to enter and specify criteria for the report you wish to generate: Fig.
  • Page 353 This selection generates a report with data for all URLs containing the consecutive characters you specified. In this example, if mail is entered, “http:// www.hotmail.com” and “http://loginnet.passport.com/ login.srf?id=2&svc=mail&cbid=24325&msppjph=1&tw =0&fs=1&fsa=1&fsat=1296000&lc=1033&_lang=EN” would be included in the report. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 354 A probe that is scheduled to run at a specified date and time can be scheduled to run on a daily basis by checking the “Daily” checkbox at the Recurrence field. 6. Enter the Total Run Time in Minutes. 7. Click Apply. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 355: View Real Time Probe Details

    Create tab. The Start Date & Time displays in the YYYY/MM/DD HH:MM:SS format. “Daily” displays in the Recurrence column if the probe is scheduled to run on a daily basis. The Status of the probe displays: “Completed”, “In Progress”, or “Scheduled”. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 356 Warned, X Strike); By Method—the method used in creating the entry (SE Keyword, URL Keyword, URL, Wildcard, Strict HTTPS, Filter Action, Pattern, File Type, Moderate HTTPS); Keyword (displays the matching keyword if the method is an , R3000 E ECHNOLOGIES NTERPRISE ILTER...
  • Page 357 Display Name; Email Address to Mail the Completed Report; Search Option criteria; Start Date & Time; Run Time; and User ID of the creator of the probe (Created by). Click Close to close this box. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
  • Page 358 Clicking Email opens the Email Address box: Fig. 2:4-12 Email Address box Enter the Email Address to Mail the Completed Report and click Send to send the completed report to the desig- nated email address. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 359: Usage Graphs

    URLs accessed by end users, number of machine IP addresses accessing the Internet, and number of end users who have been authenticated (if using the authentication feature). Fig. 2:4-13 Usage Graphs window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 360: Select A Graph To View

    The Recent Trend graph includes the following information: date range, and Number of Hits per Hour for a given date: Fig. 2:4-14 Recent Trend graph Click the “X” in the upper right corner to close this window. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 361: Daily Peaks

    Number of Hits per Second at Peak Time for a given Time using the HH:MM format: Fig. 2:4-15 Daily Peaks graph Click the “X” in the upper right corner to close this window. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 362: Shadow Log Format

    Log Format is selected from the navigation panel. If the R3000's reporting device is the 8e6 Enterprise Reporter (ER), this window is used for specifying the log format the R3000 will use for sending logs to the ER. Fig. 2:4-16 Shadow Log Format window , R3000 E...

  • Page 363: Specify The Shadow Log Format

    WARNING: When making a selection in this window, be sure to first identify the software versions currently being used by the R3000 and the ER. A correct selection in this window is critical, since the table structure of the ER has changed since software versions 4.0 and 3.50.

  • Page 364: Post 2.0.10 Log Format Option

    Medium and High HTTPS filtering. Post 2.0 log format option If this R3000 currently has the 2.0 or higher software update applied, the Post 2.0 log option should be selected, since the ER 4.1 or higher software update uses the new log structure.

  • Page 365: Roup Dministrator Ection

    URL setup • creates and maintains customized library categories • uses the lookup tool to remove URLs or search engine keywords from customized libraries , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 366: Chapter 1: Group Screen

    Group tree. NOTE: If the synchronization feature is used, a server set up in the Target mode to synchronize both profile and library setting changes will not have branches of the tree accessible. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
  • Page 367 IP sub-groups and/or individual IP members previously set up in the tree list. Click an entity in the tree list to view a menu of topics or actions that can be performed for that entity. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 368: Refresh

    ROUP SCREEN Refresh Refresh the Master IP Group, Member Click Refresh whenever a change has been made to the master IP group or member level of the tree. Fig. 3:1-2 Group screen, IP menu , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 369: Master Ip Group

    Group Details, Members, Override Account, Group Profile, Exception URL, Time Profile, Upload/Download IP Profile, Add Sub Group, Add Individual IP, Delete Group, and Paste Sub Group. Fig. 3:1-3 Group screen, master IP group menu , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 370: Group Window

    In the Group Administrator frame, the Group Name displays. To change the password for this group: 1. Enter the password in the Password and Confirm Pass- word fields, using eight to 20 characters and at least , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 371: Members Window

    IP address, and a sub-group may also contain a netmask. For the mobile mode, a member’s MAC address is used for obtaining the end user’s filtering profile. Fig. 3:1-5 Members window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 372: Add The Ip Address Of The Member

    3. Click Add to include the MAC address entry in the Current Members list box. Remove a Member from the Group To remove an entry from the Current Members list box: 1. Select the member from the list box. 2. Click Remove. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 373: Override Account Window

    A user with an override account will be able to access categories and service ports blocked at the minimum filtering level, if the option to bypass the minimum filtering level is activated. Fig. 3:1-6 Override Account window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 374: Add An Override Account

    (See Category Profile, Redirect URL, and Filter Options in this sub-section for information on the Rule, Redirect, and Filter Options tabs.) 6. Click Apply to activate the override account. 7. Click Close to close the pop-up window. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 375: Category Profile

    Category Groups tree. TIP: In the Category Groups tree, double-click the group enve- lope to open that segment of the tree and to view library catego- ries belonging to that group. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 376 3. Click the “Pass”, “Warn”, or “Block” radio button to specify whether all Uncategorized Sites should pass, trigger a warn message for the end user, or be blocked. 4. Click Apply to apply your settings to the override account profile. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 377: Redirect Url

    Page”, “Authentication Request Form”, or “Custom URL”. If “Custom URL” is selected, enter the redirect URL in the corresponding text box. The user will be redirected to the designated page at this URL instead of the block page. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 378: Filter Options

    NOTE: See the X Strikes Blocking window in Chapter 1: System screen of the Global Group Section for information on setting up the X Strikes Blocking feature. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 379 URL keywords are entered in the URL Keywords window of custom library categories. With the “Extend URL Keyword Filter Control” option enabled, a URL keyword search will be extended after the "?" character in a URL. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 380: Edit An Override Account

    3. Enter the new Password. 4. Make the same entry again in the Confirm Password field. 5. Click View/Modify to open the pop-up window. 6. Click Apply. 7. Click Close to close the pop-up window. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 381: Modify An Override Account

    6. Click Close to close the pop-up window. Delete an Override Account To delete an override account: 1. In the Current Accounts frame, select the username from the list box. 2. Click Remove. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 382: Group Profile Window

    Category tab is clicked. This tab is used for assigning filter settings to cate- gory groups/library categories for the group’s filtering profile. Fig. 3:1-10 Group Profile window, Profile tab , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 383: Create, Edit A List Of Selected Categories

    2. To change the filter setting for a category group/library category, double-click the column (Pass, Allow, Warn, , R3000 E ECHNOLOGIES NTERPRISE ILTER...
  • Page 384 4. Click Apply to apply your settings to the override account profile. 5. Click another tab (Redirect or Filter Options) to continue creating the override account profile, or click Close to close the pop-up window and to return to the Override Account window. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 385: Redirect Url

    Fig. 3:1-11 Group Profile window, Redirect URL tab Create, Edit the Redirect URL 1. Specify the type of redirect URL to be used: “Default Block Page”, “Authentication Request Form”, or “Custom URL”. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 386: Filter Options

    Filter Options displays when the Filter Options tab is clicked. This tab is used for specifying which filter option(s) will be applied to the group’s filtering profile. Fig. 3:1-12 Group Profile window, Filter Options tab , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 387: Create, Edit The Filter Options

    Google or Yahoo! images returned by the query to load on the page. The user will receive only one strike if all inappropriate images load within the tolerance time range of a given strike. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
  • Page 388 URL keyword search will be extended after the "?" character in a URL. NOTE: To set up URL keywords in a URL Keywords window for Custom Categories, see Chapter 2: Library screen, URL Keywords window. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 389: Exception Url Window

    This window is used for blocking group members’ access to specified URLs and/or for letting group members access specified URLs blocked at the minimum filtering level. Fig. 3:1-13 Exception URL window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 390: Block Url Frame

    To block the group’s access to the URL again: 1. Select the URL from the ByPass URLs list box. 2. Click Remove. Apply Settings Click Apply to apply your settings after adding or removing a URL. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 391: Time Profile Window

    The Time Profile window displays when Time Profile is selected from the group menu. This window is used for setting up or modifying a filtering profile to be activated at a specified time. Fig. 3:1-14 Time Profile window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 392: Add A Time Profile

    Rule, Redirect, Filter Options, and Excep- tion tabs.) 4. Click Apply to activate the time profile for the IP group at the specified time. 5. Click Close to close the pop-up window. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 393: Category Profile

    Fig. 3:1-15 Time Profile pop-up window, Rule tab NOTE: See the Override Account window, Category Profile sub- section in this chapter for information about entries that can be made for this component of the filtering profile. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 394: Redirect Url

    Fig. 3:1-16 Time Profile pop-up window, Redirect URL tab NOTE: See the Override Account window, Redirect URL sub- section in this chapter for information about entries that can be made for this component of the filtering profile. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 395: Filter Options

    Fig. 3:1-17 Time Profile pop-up window, Filter Options tab NOTE: See the Override Account window, Filter Options sub- section in this chapter for information about entries that can be made for this component of the filtering profile. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 396: Exception Url

    Minimum Filtering Bypass Options tab. (See the Override Account window in this section for informa- tion on setting up an override account to allow a user to bypass group settings and minimum filtering level settings, if allowed.) , R3000 E ECHNOLOGIES NTERPRISE ILTER...
  • Page 397 2. Click Add to include the URL in the ByPass URLs list box. To block the group’s access to the URL again: 1. Select the URL from the ByPass URLs list box. 2. Click Remove. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 398: Modify A Time Profile

    5. Click Apply. 6. Click Close to close the pop-up window. Delete a Time Profile To delete a time profile: 1. Select the time range from the Current Time Profiles list box. 2. Click Remove. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 399: Upload/Download Ip Profile Window

    Upload/Download IP Profile is selected from the group menu. This window is used for uploading or downloading a text file containing filtering profiles of multiple users or sub- groups. Fig. 3:1-19 Upload/Download IP Profile window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 400: Upload Ip Profiles

    4. Click the “X” in the upper right corner of the Upload IP Profiles pop-up window to close it. 5. Click OK in the message dialog box to refresh the IP groups branch of the tree. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 401: Download Profile

    Fig. 3:1-21 Download IP Profiles window The contents of this window can viewed, printed, and/or saved. 2. Click the “X” in the upper right corner of the window to close it. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 402: Add Sub Group

    (percent sign), "<" (less than symbol), “>” (greater than symbol), "+" (plus symbol), "-" (minus sign), "=" (equals sign). 3. Click OK to close the dialog box and to add the sub- group to the master IP group tree. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 403: Add Individual Ip

    "{" (left brace), "}" (right brace), "[" (left bracket), "]" (right bracket), "@" (at sign), "#" (pound sign), "$" (dollar sign), "%" (percent sign), "<" (less than symbol), “>” (greater than symbol), "+" (plus symbol), "-" (minus sign), "=" (equals sign). , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 404: Delete Group

    The minimum filtering level is established by the global administrator. Delete Group Delete a Master IP Group Profile To delete a group profile, choose Delete Group from the group menu. This action removes the master IP group from the tree. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 405: Paste Sub Group

    Fig. 3:1-24 Paste Sub Group dialog box 2. In the Input sub group name field, enter the name of the sub-group. 3. Click OK to add the sub-group to the group tree. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 406: Sub Group

    Click the sub-group’s link to view a menu of sub-topics: Sub Group Details, Members, Sub Group Profile, Exception URL, Time Profile, Delete Sub Group, and Copy Sub Group. Fig. 3:1-25 Group screen, Sub Group menu , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 407: Sub Group (Ip Group) Window

    Group Details is selected from the menu. This window is used for viewing and adding or editing details on an IP group member. , view only Fig. 3:1-26 Sub Group (IP Group) window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 408: View Ip Sub-Group Details

    Add IP Sub-Group Details If the sub-group was not previously defined, the fields in the IP Address frame and the Apply button remain activated. , fields activated Fig. 3:1-27 Sub Group (IP Group) window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 409 • enter the IP address range in the text boxes. 3. Click Apply to save your entries. Once applied, the Member fields become greyed-out and the Apply button becomes deactivated (see Fig. 3:1-26). , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 410: Members Window

    This window is used for modifying the sub- group’s Member IP address, if using the invisible or router mode. If using the mobile mode, MAC address(es) can be selected for inclusion in the sub-group. Fig. 3:1-28 Members window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 411: Modify Sub-Group Members

    MAC address, and then pressing the Shift key on your keyboard while clicking the last MAC address, and then clicking the arrow key pointing to that list box. 3. Click Modify to apply your settings. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 412: Sub Group Profile Window

    NOTE: See the Time Profile window in the group tree section of this chapter for information on entries that can be made for the following components of the filtering profile: Category Profile, Redirect URL, Filter Options, Exception URL. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 413: Delete Sub Group

    2. Select the group from the tree and choose Paste Sub Group from the group menu to paste the sub-group to the group. (See Paste Sub Group dialog box in the Group section of this chapter.) , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 414: Individual Ip

    Individual IP member. Click the individual IP member’s link to view a menu of sub-topics: Members, Individual IP Profile, Exception URL, Time Profile, Delete Individual IP. Fig. 3:1-29 Group screen, Individual IP menu , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 415: Member Window

    Enter the IP Address of the Member In the Modify Individual Group Member frame: 1. Enter the IP address in the Member field. 2. If using the mobile mode, select the member’s MAC Address from the pull-down menu. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 416: Individual Ip Profile Window

    NOTE: See the Time Profile window in the group tree section of this chapter for information on entries that can be made for the following components of the filtering profile: Category Profile, Redirect URL, Filter Options, Exception URL. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 417: Delete Individual Ip

    ROUP SCREEN Delete Individual IP Delete an Individual IP Member To delete an individual IP member, choose Delete Individual IP from the individual IP member menu. This action removes the member from the tree. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 418: Chapter 2: Library Screen

    Library Lookup and Category Groups, the latter topic containing the Custom Categories sub-topic. NOTE: If the synchronization feature is used, a server set up in the Target mode will only have the Library Lookup topic available. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 419: Library Lookup

    Fig. 3:2-2 Library Lookup window NOTE: This window is also used by global administrators, except their permissions let them remove URLs and search engine keywords/phrases. The reload library function is used after making changes to the library. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 420: Look Up A Url

    3. Click OK to close the alert box and to display any results in the Result Category list box, showing the long name of the library category, followed by the URL. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 421: Look Up A Search Engine Keyword

    Search Engine Keyword or keyword phrase, up to 75 alphanumeric characters. 2. Click Lookup to display results in the Result Category list box, showing the long name of all categories that contain the search engine keyword/phrase. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 422: Custom Categories

    Maintaining the list of URLs and keywords is the responsibility of the global or group administrator. WARNING: The maximum number of categories that can be saved is 250. This figure includes both 8e6 supplied categories and custom categories. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 423: Add Category

    Upon saving this entry, the long name displays in the tree list. For group administrators adding a new custom category, the group name displays in paren- theses after the long name. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 424: Refresh

    NOTE: The category must have URLs, URL keywords, and/or search keywords added to its profile in order for it to be effective. Refresh Refresh the Library Click Refresh after uploading a file to a customized library category. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 425: Custom Library Category

    Fig. 3:2-5 Library screen, custom library category menu NOTE: Since custom categories are not created by 8e6, updates cannot be provided. Maintaining the list of URLs and keywords is the responsibility of the global or group administrator. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 426: Library Details Window

    This window is used for editing the long name of the custom library category, and for viewing name criteria previously entered. Fig. 3:2-6 Library Details window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 427: View, Edit Library Details

    Group Name and library category Short Name. 1. The long Description name displays and can be edited. 2. After modifying the description for the library category, click Apply to save your entry. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 428: Urls Window

    URLs ending in “.playboy.com”. A URL is used in a filtering profile for blocking a user’s access to a specified site or service. Fig. 3:2-7 URLs window, Action tab , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 429: View A List Of Urls In The Library Category

    2. Make a selection from the pull-down menu for “Master List”, or “Wild Card Master List”. 3. Click View List to display the specified items in the Select List list box: Fig. 3:2-8 URLs window, View tab , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 430: Add Or Remove Urls Or Wildcard Urls

    Ctrl key on your keyboard. Blocks of URLs can be selected by clicking the first URL, and then pressing the Shift key on your keyboard while clicking the last URL. 4. Click Apply Action. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 431: Add A Wildcard Url To The Library Category

    *.cnn.com is added to a category set up to be blocked, the end user will be able to access http://www.cnn.com since it is a direct match, but will not be able to access http://www.sports.cnn.com, since direct URL entries take precedence over wildcard entries. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 432: Remove A Url From The Library Category

    Card URL List frame, as pertinent. 3. Click Remove to display the associated URLs in the list box below. 4. Select the URL(s) that you wish to remove from the cate- gory. 5. Click Apply Action. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 433: Upload A Master List To The Library

    TIP: A URL text file must contain one URL per line. WARNING: The text file uploaded to the server will overwrite the current file. NOTE: Before the file is uploaded to the server, it will first be vali- dated , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 434 Go to the IP Lookup Options section and click the radio button corresponding to the option to be used when uploading the file: • “Upload the file with IP Lookup” - If this option is , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 435: Upload A Master List Of Wildcard Urls

    1. Click Upload Wildcard Master to open the Upload Custom Library WildCard URL pop-up window: Fig. 3:2-11 Upload Custom Library WildCard URL window 2. Click Browse to open the Choose file pop-up window. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 436 5. If the file contains invalid wildcard URLs, click Back to return to the Upload WildCard URL window. Another attempt to validate the file can be made after corrections have been made to the file. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 437: Reload The Library

    After all changes have been made to library windows, click Reload Library to refresh. NOTE: Since reloading the library utilizes system resources that impact the performance of the R3000, 8e6 recommends clicking Reload Library only after modifications to all library windows have been made.

  • Page 438: Url Keywords Window

    URL keywords can be added in this window but URL keyword filtering will not be in effect for the user(s). (See the Filter Options tab in the Group screen section for information about enabling URL keyword filtering.) , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 439: View A List Of Url Keywords

    1. Enter the Keyword in the Edit Keyword List frame. 2. Click Add. Remove a URL Keyword from the Library To remove a URL keyword from the library category: 1. Enter the Keyword. 2. Click Remove. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 440: Upload A List Of Url Keywords To The Library

    After all changes have been made to library windows, in the Reload URL Keywords frame, click Reload to refresh. NOTE: Since reloading the library utilizes system resources that impact the performance of the R3000, 8e6 recommends clicking Reload only after modifications to all library windows have been made.

  • Page 441: Search Engine Keywords Window

    A library category uses search engine keywords to block searches on subjects containing keywords included in its list. Fig. 3:2-15 Search Engine Keywords window , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 442: View A List Of Search Engine Keywords

    To add a search engine keyword or keyword phrase to the library category: 1. In the Edit Search Keyword List frame, enter up to 75 alphanumeric characters in the Keyword field. 2. Click Add. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 443: Remove A Search Engine Keyword

    After all changes have been made to library windows, in the Reload Search Keywords frame, click Reload to refresh. NOTE: Since reloading the library utilizes system resources that impact the performance of the R3000, 8e6 recommends clicking Reload only after modifications to all library windows have been made.

  • Page 444: Delete Category

    IBRARY SCREEN Delete Category Delete a Custom Category To delete a custom library category, choose Delete Cate- gory from the menu. This action removes the library cate- gory from the Custom Categories list. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 445: Technical Support / Product Warranties

    ECHNICAL UPPORT RODUCT ARRANTIES Technical Support For technical support, visit 8e6 Technologies’s Technical Support Web page at http://www.8e6.com/support.html, or contact us by phone, by email, or in writing. Hours Regular office hours are from Monday through Friday, 8 a.m. to 5 p.m. PST.

  • Page 446: Office Locations And Phone Numbers

    Orange, CA 92865-4232 Local 714.282.6111 714.282.6116 Domestic US 1.888.786.7999 International +1.714.282.6111 8e6 Taiwan 7 Fl., No. 1, Sec. 2, Ren-Ai Rd. Taipei 10055 Taiwan, R.O.C. Taipei Local 2397-0300 2397-0306 Domestic Taiwan : 02-2397-0300 International 886-2-2397-0300 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 447: Support Procedures

    • Your trouble ticket will not be closed until your permission is confirmed. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 448: Product Warranties

    ARRANTIES Product Warranties Standard Warranty 8e6 Technologies warrants the medium on which the 8e6 product is provided to be free from defects in material and workmanship under normal use for period of one year (the “Warranty Period”) from the date of delivery. This standard Warranty Period applies to both new and refurbished equip- ment for a period of one year from the delivery date.

  • Page 449: Technical Support And Service

    RODUCT ARRANTIES Technical Support and Service 8e6 Technologies will provide initial installation support and technical support for up to 90 days following installation. 8e6 Technologies provides after-hour emergency support to 8e6 server customers. An after hours technician can be reached by voice line.

  • Page 450: Extended Warranty (Optional)

    If parts are discontinued from production during the Warranty Period, immediate replacement product(s) or hardware parts will be available for exchange with defective parts from 8e6 Technologies’ local reseller or distributor. Extended Technical Support and Service Extended technical support is available to customers under a Technical Support Agreement.

  • Page 451: Appendices Section

    • Port command codes: Filter all ports Filter the defined port number(s) Open all ports Open the defined port number(s) Set the defined port number(s) to trigger a warn message Block all ports , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 452 PASSED = When positioned at the end of a string of categories or after a category command code, this code indicates that unidentified categories will follow suit with categories defined by that code: J (pass), R (block), or M (receive warning message). , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 453: Category Codes

    To disable all filter codes for an IP profile, enter 0x1 at the end of the profile string. See http://www.8e6.com/r3000help/files/ 2group_ipprofiles.html for examples of filtering profile entries. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 454: Traveler Log Messages

    Your R3000 receives 8e6 supplied library category updates and software updates via Traveler, 8e6’s executable program for updating the R3000 server. You can run Trav- eler on demand via the Manual Update to 8e6 Supplied Categories window, or schedule Traveler to launch at a specified time via the Configuration window.

  • Page 455: General Activity

    • Create tmp file. • getpid(). • Write pid to tmp file. • Traveler failed to create the tmp file: <ServerConstants.TRAVELER_TEMP> • Temp file deleted. • Fail to rename <szFileUrlTemp> to final <szFileUrl> , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 456: Library Download Process

    • FTP error <FTP reply code> • Could not write history file! (exception) • Could not read emergency date from: <emergency update file>. • Failed to download <filename> (Exception) • Finished updating libraries! , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 457: Customer Feedback Module Option

    • PrintstackTrace - Fail to back up file for <FileUrl> • PrintStackTrace - <java error message> • PrintstackTrace - Fail to back up file for <category>.sew • PrintstackTrace - Fail to copy file for merging , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 458: Error Messages

    • Reloading library encounters an exception • Send alert encountered an exception • Traveler exits after reaching time limit: <time limit> mins • Log file could not be set. (Exception) • List could not be read from file. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 459: Weekly Update (7 Days Library)

    • Was not a primary language deletion file. • Failed to sort the library files. • Failed to merge files for <category> • File is the most current version. • Successfully updated. • Checksum verification failed. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 460: Full Url Library Update (Urls, Url Keywords)

    • Failed to download <pattern> • IM and P2P Update has successfully completed. Newsgroup Library Update (News) • Download newsgroup: • Successfully downloaded newslist • Failed to download newslist • Newsgroup Library Update has successfully completed. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 461: Search Engine Keywords Library Update

    • Successfully processed <patch> • Failed to download <patch> • Patch Update has completed. Emergency Update • Emergency update: • Could not read emergency date from: <emergency update file>. • Emergency Update has completed. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 462: Create A Custom Block Page

    Block page, not the Options page. Part I: Modify the R3000 1. Enable block page redirection Select either of the following options to modify the R3000. Option 1 lets you modify the back end, and Option 2 lets you modify the R3000 console.

  • Page 463: Option 2: Modify The R3000 Console

    (e.g. “_”), if such characters are used in the URL a modified name must be used instead for the <blockpage>. As a result, the R3000 will redirect the block page to the customized one with the following link format: http://<server for block_page>[:<port for block page>]/ <blockpage>?URL=<blocked url>&IP=<client...

  • Page 464: Part Ii: Customize The Block Page

    Blocked URL: From the query string of the block page URL IP that accessed the blocked URL: (see URL) Category of the blocked URL: (see URL) USER User Name that accessed the blocked URL: (see URL) , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 465: Implement The "Further Option" (Optional)

    3. CGI written in C See the Reference portion of this appendix for coding details. NOTE: Don’t forget to replace <R3000 IP> with the real IP in the HTML/CGI before using these samples. Part III: Restart the R3000 You must restart the R3000 to make your changes effective.

  • Page 466: Reference

    PPENDICES ECTION PPENDIX Reference HTML <!-- Description: Sample HTML for R3000 customized block page --> <!-- Replace <R3000 IP> with real IP before using --> <!-- Revision: 1 --> <!-- Date: 03/08/2004 --> <html> <head> <script language=javascript> function parseData(str, start, end) result = "";...
  • Page 467 <input type=hidden name="URL" value=""> <input type=hidden name="IP" value=""> <input type=hidden name="CAT" value=""> <input type=hidden name="USER" value=""> <input type=hidden name="STEP" value="STEP2"> </form> <br>R3000 Customized Block Page (HTML using Java Script to parse and post form data)<br> <script language=javascript> getData(); showData(); </script>...

  • Page 468: Cgi Written In Perl

    # File Type: # Description: Sample Perl script for R3000 customized block page # Replace the <R3000 IP> with the real IP before using. # This script provide data to the options CGI through query string # Revision: # Date: 03/08/2004 $method = $ENV{'REQUEST_METHOD'};...

  • Page 469: Use Java Script To Post Form Data

    # File Type: # Description: Sample Perl script for R3000 customized block page # Replace the <R3000 IP> with the real IP before using. # This script uses Java Script to post form data to # options CGI # Revision: # Date: 03/08/2004 $method = $ENV{'REQUEST_METHOD'};...
  • Page 470 "<input type=hidden name=\"URL\" value=\"$url\">\n"; print "<input type=hidden name=\"CAT\" value=\"$cat\">\n"; print "<input type=hidden name=\"USER\" value=\"$user\">\n"; print "<input type=hidden name=\"STEP\" value=\"STEP2\">\n"; print "<br>R3000 Customized Block Page (CGI written with Perl using Java Script to post form data)<br>\n"; print "URL: $url<br>\n"; print "IP: $ip<br>\n";...

  • Page 471: Cgi Written In C

    PPENDIX CGI written in C * cusc_block.c * Description: sample C source code of CGI for customized block page * Replace <R3000 IP> with real IP and recompile before using * Revision: 1 * Date: 03/08/2004 #include <stdio.h> struct { char *name;...
  • Page 472 (strcmp(entries[index].name, "IP") == 0) strcpy(szIP, entries[index].val); else if (strcmp(entries[index].name, "URL") == 0) strcpy(szURL, entries[index].val); else if (strcmp(entries[index].name, "CAT") == 0) strcpy(szCategory, entries[index].val); else if (strcmp(entries[index].name, "USER") == 0) strcpy(szUserName, entries[index].val); printhtml(); void printhtml() , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 473 Customized Block Page (CGI written with C using Java Script to post form data)<br>\n"); printf("URL: %s<br>\n", szURL); printf("IP: %s<br>\n", szIP); printf("CAT: %s<br>\n", szCategory); printf("USER: %s<br>\n", szUserName);...
  • Page 474 = '\0'; if(line[x]) ++x; y=0; while(line[y++] = line[x++]); return word; void plustospace(char *str) register int x; for(x=0;str[x];x++) if(str[x] == '+') str[x] = ' '; char *fmakeword(FILE *f, char stop, int *cl) int wsize; , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 475 * Change the string to upper case int to_upper(char *string) int len; int i; char *tmp=NULL; if (string && strlen(string)) if (!(tmp=(char*)strdup(string))) return 0; len=strlen(string); for (i=0; i<len; i++) string[i]=toupper(tmp[i]); free(tmp); return 1; , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 476 PPENDICES ECTION PPENDIX void getquery(char *paramd, char **paramv) if (paramd == NULL) *paramv = NULL; else *paramv = (char *)strtok(paramd, "&"); void getnextquery(char **paramv) *paramv = (char *)strtok(NULL, "&"); , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 477: Override Pop-Up Blockers

    This appendix provides instructions on how to use an over- ride account if typical pop-up blocking software is installed, as in the following products: Yahoo! Toolbar, Google Toolbar, AdwareSafe, Mozilla Firefox, and Windows XP Service Pack 2 (SP2). , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 478: Yahoo! Toolbar Pop-Up Blocker

    1. Go to the Yahoo! Toolbar and click the pop-up icon to open the pop-up menu: Fig. D-2 Select menu option Always Allow Pop-Ups From 2. Choose Always Allow Pop-Ups From to open the Yahoo! Pop-Up Blocker dialog box: , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 479 Pop-Ups list box to activate the Allow button. 4. Click Allow to move the selected source to the Always Allow Pop-Ups From These Sources list box. 5. Click Close to save your changes and to close the dialog box. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 480: Google Toolbar Pop-Up Blocker

    # blocked icon: Fig. D-4 # blocked icon enabled Clicking this icon toggles to the Site pop-ups allowed icon, adding the override account window to your white list: Fig. D-5 Site pop-ups allowed icon enabled , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 481: Adwaresafe Pop-Up Blocker

    3. Click the Override button to open the override account pop-up window. 4. Go back to the SearchSafe toolbar and click the icon for Popup protection off to toggle back to # popups blocked. This action turns on pop-up blocking again. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 482: Mozilla Firefox Pop-Up Blocker

    3. With the “Block unrequested popup windows” checkbox checked, click Allowed Sites and enter the URL to allow the override account window to pass. 4. Click OK to save your changes and to close the dialog box. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 483: Windows Xp Sp2 Pop-Up Blocker

    Internet Options to open the Internet Options dialog box. 2. Click the Privacy tab: Fig. D-7 Enable pop-up blocking 3. In the Pop-up Blocker frame, check “Block pop-ups”. 4. Click Apply and then click OK to close the dialog box. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 484: Temporarily Disable Pop-Up Blocking

    1. In the Options page (see Fig. D-1), enter your Username and Password. 2. Press and hold the Ctrl key on your keyboard while simultaneously clicking the Override button—this action opens the override account pop-up window. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 485: Use The Ie Toolbar

    3. In the Options page (see Fig. D-1), enter your Username and Password. 4. Click the Override button to open the override account pop-up window. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 486: Set Up The Information Bar

    2. Click the Override button. This action displays the following message in the Information Bar: “Pop-up blocked. To see this pop-up or additional options click here...”: Fig. D-10 Information Bar showing blocked pop-up status , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 487 NOTE: To view your white list, go to the Pop-up Blocker Settings dialog box (see Fig. D-9) and see the entries in the Allowed sites list box. 6. Go back to the Options page and click Override to open the override account window. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 488: 8E6 Mobile Client

    8e6 Mobile Client ensures Internet activity of all end users located outside the organization will be tracked and filtered in the same manner as end users on the R3000 filtering appliance used in house, thereby giving you, the administrator, assurance that your organization will be...

  • Page 489: Environment Requirements

    IE 6.0 or higher • JavaScript enabled • Pop-up blocking software, if installed, must be disabled Network Requirement • High speed connection from the external mobile R3000 server to mobile PCs Remote Filtering Components • Mobile Client software installed on each end user’s mobile PC •...

  • Page 490: Work Flow Overview

    Mobile Client Installed on a Mobile PC For mobile PCs located outside of the organization: • a mobile R3000 filtering appliance set in the mobile mode is used for obtaining the end user’s profile and for logging his/her Internet activity •...

  • Page 491: Network Operations Overview

    R3000 filtering appliance and an 8e6 ER (Enter- prise Reporter) reporting appliance on the network: Fig. E:1-2 Diagram showing 8e6 Mobile Client with R3000 and ER 8e6 Mobile Client 1. A URL request is made from an end user’s mobile PC to access inappropriate content on the Internet.

  • Page 492: Enterprise Reporter

    URL is found and the site is disallowed, the Mobile Client software blocks the connection to the Web server. Enterprise Reporter A. The mobile R3000 appliance sends logs to the local Enterprise Reporter (ER) for processing. B. Using the ER Web Client, an administrator can generate customized reports on the remote end user in minutes.

  • Page 493: Mobile Server Section

    IP address on your network. NOTE: If you do not have the R3000 Quick Start Guide, contact 8e6 Technologies immediately to have a copy sent to you. The basic requirements for initial network setup are as follows: •...

  • Page 494: Configure The R3000 To Use The Mobile Mode

    Configure the R3000 to use the Mobile Mode The Operation Mode window is used for setting up the external mobile R3000 to use the mobile mode for filtering mobile PCs. 1. In the Mode frame, select “Mobile” to display frames used for configuring the R3000 in the mobile mode: Fig.
  • Page 495 4. In the Mobile Client Control frame, at the Client Resyn- chronization Time field, specify the interval of minutes for the external R3000 to resynchronize the profile on the end user's workstation with the profile set up for him/her on the internal R3000. By default, 60 minutes displays.

  • Page 496: Add Mac Addresses To The Master Ip Group

    Fig. E:2-2 Members window 1. In the New Members frame, select “Source MAC”. 2. Enter the member’s MAC address. 3. Click Add to include the MAC address entry in the Current Members list box. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 497: Select Mac Addresses For A Sub Group

    MAC addresses for inclusion in the sub- group. , sub-group with MAC addresses Fig. E:2-3 Members window The Modify Sub Group Member frame is comprised of the IP Address and MAC Address frames. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 498 MAC address, and then pressing the Shift key on your keyboard while clicking the last MAC address, and then clicking the arrow key pointing to that list box. 3. Click Modify to apply your settings. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 499: View Sub Group Mac Addresses

    MAC addresses display in the Member MAC(s) list box in the MAC Address frame. If the sub-group has been completely defined, IP address criteria was entered in the IP Address frame and saved in this window. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 500: Add A Mac Address To An Individual Member

    Fig. E:2-5 Member window with MAC Address 1. In the Modify Individual Group Member frame, select the member’s MAC Address from the pull-down menu. 2. Click Modify to apply your changes. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 501: Upload Mac Address File For Global, Ip Group

    IP address and MAC address. For example, if the end user’s IP address is 150.100.30.2 and his/her MAC address is 00:04:21:AF:33:E1, the , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 502: Echnologies , R3000 Enterprise Ilter Ser Uide

    “rreynolds”: rreynolds,150.100.30.2,A,J CHAT R GPORN I,1, ,1 rreynolds,00:04:21:AF:33:E1,A,J CHAT R GPORN I,1, ,1 NOTE: For other examples of entries to include in the profile file, go to http://www.8e6.com/r3000help/files/ 2group_ipprofiles.html. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 503: Mobile Client Section

    • An .msi package that can be assigned via Group Policy to workstations to remove a previously-installed Mobile Client package (the "remover," 8e6purge.msi) • Online help instructions for configuring, deploying, and removing the Mobile Client. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 504: Download And Install The Deployment Kit

    Download and Install the Deployment Kit To download the 8e6 Mobile Client Windows Deployment Kit to your machine: 1. Insert the CD-ROM that was sent with your R3000 server into your machine. 2. Open the 8e6MobileClient folder and find the .msi file for the 8e6 Mobile Client application.
  • Page 505 8e6 Mobile Client Windows Deployment Kit Installation Wizard: Fig. E:3-4 Windows Deployment Kit Installation Wizard 6. Click Next to proceed in specifying the Destination Folder into which the downloaded file will be installed: , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 506 7. Specify the destination folder to be used, and then click Next to go to the page that confirms the installation process is ready to begin: Fig. E:3-6 Installation process ready to begin 8. Click Next to begin the installation process: , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 507 PPENDICES ECTION PPENDIX Fig. E:3-7 Installation process in progress The following page displays when the installation process is complete: Fig. E:3-8 Installation complete 9. Click Finish to close the wizard dialog box. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 508: Access The Mobile Client Configuration Editor

    To begin using the Configuration Editor, consult the help topics at Start > Programs > 8e6 Mobile Client Deploy- ment Kit > Online Help, or via the Help link in the Configu- ration Editor. Or, refer to the instructions in this appendix. , R3000 E ECHNOLOGIES NTERPRISE ILTER...

  • Page 509: Select The Package: Windows Or Macintosh Os X

    Mobile Server cannot be found checkboxes.”—the latter which is populated with a check mark. For Windows, the “Force auto-reboot even if user is logged in during instal- lation.” checkbox also is activated. This checkbox displays greyed-out for Macintosh packages. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 510 PPENDICES ECTION PPENDIX Fig. E:3-11 Windows package opened Fig. E:3-12 Macintosh package opened , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 511: Configure The Mobile Client For Deployment

    4. Click Add to include the entry in the list box below. 5. After entering each mobile R3000, click OK to close the dialog box and to display your entries in the Mobile filter host(s) field of the 8e6 Mobile Client Configuration Editor.

  • Page 512: Add, Remove Internal R3000

    R3000 is using a different port. 4. Click Add to include the entry in the list box below. 5. After entering each internal R3000, click OK to close the dialog box and to display your entries in the Internal filter host(s) field of the 8e6 Mobile Client Configuration Editor.

  • Page 513: Add Proxy Address Or Host Name

    Click the “Proxy authentication required” checkbox; this action activates the Username and Password fields. b. Enter the proxy server Username. c. Enter the proxy server Password twice: , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 514: Option: Block All Urls If Filter Cannot Be Found

    The “Block all URLs if filter cannot be found” checkbox is checked by default. This setting indicates that if the Mobile Client cannot detect the mobile R3000, all URLs requested by the end user will be blocked. Uncheck this box if the end user’s workstation should be permitted unrestricted Internet access when the mobile R3000 is unavailable.

  • Page 515: Windows Option: Force Reboot With User Logged In

    NOTE: The forced reboot option does not provide the end user with an opportunity to save files and close applications. Save settings Select File > Save as... and choose a filename, or select “8e6client.msi” or “8e6clientInstaller.mpkg.tar” to overwrite the original file. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 516: Mobile Client Deployment To Windows Computers

    Right-click the new package and choose Properties > Deployment, and then check the "Uninstall this appli- cation when it falls out of the scope of management" box. Click OK. f. Close the Group Policy Object Editor. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 517 To create a WMI filter: WMI filters are capable of applying very sophisticated selection criteria to set the scope of a policy. See Microsoft Knowledgebase article #555253 for details on creating WMI filters: http://support.microsoft.com/kb/ 555253 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 518 NOTE: In some cases involving Windows XP workstations, it may be necessary to reboot twice for Group Policy processing to occur. c. Verify the Mobile Client is blocking access to unautho- rized Web sites, and is allowing access to other sites. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 519: Installation On A Single Computer

    Fig. E:3-18 Finish installation process 2. To complete the installation process now, save any appli- cations—if necessary, and then click Yes to shut down and restart the computer. Or, click No to complete the installation process later. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 520: Mobile Client Removal From Computers

    Mobile Client removed, go to the taskbar and select Start > Control Panel > Add or Remove Programs in Windows XP, and Start > Settings > Control Panel > Add/Remove Programs in Windows 2000. , R3000 E ECHNOLOGIES NTERPRISE ILTER...
  • Page 521 4. Copy the eight-digit number displayed in the ID field. In this example: 23526528 5. Access the 8e6 Mobile Client Configuration Editor, and go to Tools > Create uninstall key... to open the Create Uninstall Key pop-up window: , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 522 Copy this Uninstall key. In this example: 0d72dd NOTE: Click Close to close the Create Uninstall Key pop-up window. 7. Access the Uninstall dialog box again, and enter the generated password key in the Key field. In this example: 0d72dd , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 523 8. Click OK to begin the uninstallation process. When the Mobile Client has been uninstalled, a message displays asking you to restart the machine: Fig. E:3-24 Restart message 9. Click Restart to restart the machine. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 524: Glossary

    - An R3000 set up in the firewall mode will filter all requests. If the request is appropriate, the original packet will pass unchanged. If the request is inappropriate, the original packet will be blocked from being routed through.
  • Page 525 IM services specified in the library category. invisible mode - An R3000 set up in the invisible mode will filter all connections on the Ethernet between client PCs and the Internet, without stopping each IP packet on the same Ethernet segment.
  • Page 526 - A process that occurs when the R3000 attempts to resolve the IP address of the authentication server with the machine name of that server. This contin- uous and regulated automated procedure ensures the connection between the two servers is maintained.
  • Page 527 Using this feature of the R3000, groups and/or individual client machines can be set up to block the use of P2P services specified in the library category.
  • Page 528 The user profile in the Radius accounting server holds the filter definition for the user. Real Time Probe - On the R3000, this tool is used for moni- toring the Internet activity of specified users in real time. The report generated by the probe lets the administrator know whether end users are using the Internet appropriately.
  • Page 529 Traveler - 8e6’s executable program that downloads updates to your R3000 on demand or at a scheduled time. URL - An abbreviation for Uniform Resource Locator, the global address of Web pages and other resources on the Internet.
  • Page 530 PPENDICES ECTION PPENDIX URL from that library category or an uncategorized URL is requested. white list - A list of approved library categories for a speci- fied entity’s filtering profile. , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 531 Backup/Restore window 170 block page 12 custom 439 route table 95 Block Page Authentication window 76 Block Page Customization window 209 Block Page Device 160 Block Page Route Table window 95 block setting 25 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

  • Page 532: Index

    Current memory usage diagnostic tool 113 custom categories 23 delete 421 menu 402 Custom Categories menu 399 custom category definition 501 Customer Feedback Module menu 294 Customer Feedback Module window 294 Customization menu 202 Daily Peaks 338 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 533 15 definition 501 diagram with filtering and cache setup 16 diagram with firewall and cache setup 15 frame, terminology 5 FTP 10 CFM 294 Change Log FTP Setup 124 proxy setting 277 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 534 Group screen 53 Group window 347 Hardware Failure Detection window 185 Help screen 54 Help Topics 55 HTTPS 10 library updates 276 login 48 port numbers 429 proxy environment 163 HTTPS Filtering 73 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 535 JavaScript 10 keyword definition 502 search engine, 8e6 supplied category 315 search engine, custom category 418 update 278 URL, 8e6 supplied category 311 URL, custom category 415 LAN Settings window 89 LDAP definition 502 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 536 21 backup/restore 177 emergency patch update 289 library update 282 library update message 431 patch updates 138 realtime traffic, usage 115 transfer from R3000 to ER 320 log off Administrator GUI 66 log on , R3000 E ECHNOLOGIES NTERPRISE...
  • Page 537 24 bypass options 267 definition 503 Minimum Filtering Level window 262 categories profile 262 port profile 265 mobile mode 162 Mode menu 158 name resolution, definition 503 NAT 36 definition 503 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 538 249 Google Toolbar popup blocking 457 Mozilla Firefox popup blocking 459 override popup blockers 454 profile type 21 Windows XP SP2 popup blocking 460 Yahoo! Toolbar popup blocking 455 Override Account window 249 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 539 359 individual IP member 393 minimum filtering level 262 sub-group 389 Profile Control window 217 profile string definition 504 elements 428 protocol, definition 504 Proxy Environment Settings window 163 proxy server 163 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 540 NDEX definition 504 pull-down menu, terminology 6 Quick Start Guide 48 R2000 1 R3000 Enterprise Filter 1 R3000 Quick Start Guide 470 R3000IR 48 radio button, terminology 6 Radius definition 505 Radius Authentication Settings menu 179 Radius Authentication Settings window 179...
  • Page 541 Shift key 64 ShutDown window 84 SMTP definition 505 SMTP Server Settings window 130 SNMP definition 505 SNMP window 183 Source mode 35 Stand Alone mode 35 static filtering profiles 20 Status window 152 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 542 Target mode 35 technical support 422 text box, terminology 7 time profile add 369 definition 506 delete 375 modify 375 profile type 21 Time Profile window 368 time-based profile 77 tolerance timer 190 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 543 415 URL, definition 506 URLs window 306 8e6 supplied category 306 custom category 405 Usage Graphs window 336 usage logs 115 View Log File window 114 virtual IP address, definition 506 VLAN 506 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...
  • Page 544 77 white list definition 507 wildcard 292 window, terminology 8 Windows 2000 466 Windows XP 466 workstation requirements 10 X Strikes Blocking global group filter option 245 X Strikes Blocking window 186 , R3000 E ECHNOLOGIES NTERPRISE ILTER UIDE...

This manual is also suitable for:

R3000ir

Table of Contents