Https Filtering - M86 Security M86 Web Filter User Manual

HTTPS Filtering

Specify your preference for filtering HTTPS sites in the
HTTPS Filtering frame. Select from the following settings for
the HTTPS Filtering Level:
• "None" - if you do not want the Web Filter to filter HTTPS
• "Low" - if you want the Web Filter to filter HTTPS sites
• "Medium" - if you want the Web Filter to communicate
• "High" - if you want the Web Filter to communicate with
WARNING: If using the "High" setting, end users may be blocked
from accessing acceptable Web sites if the host names of these
sites do not match their generated certificates. To allow users
access to acceptable HTTPS sites, the IP addresses and corre-
sponding URLs of these sites should be included in a custom
library category that is allowed to pass. (See the Custom library
category sub-section in Chapter 2: Library screen from the Group
Administrator Section for information on setting up a custom
library category. See Global Group Profile window and Minimum
Filtering Level window in Chapter 2: Policy screen from the
Global Administrator Section for information on allowing a library
category to pass.)
M86 S U G
ECURITY SER UIDE
G
LOBAL
sites
without having the Web Filter communicate with IP
addresses or hostnames of HTTPS servers
with HTTPS servers in order to get the URL from the
certificate for URL validation only (this is the default
setting)
If "Medium" is selected, by default the option is enabled
for forwarding the DNS lookup in order to validate the
hostname in the certificate
HTTPS servers to obtain the certificate with a very strict
validation of the return URL
If "High" is selected, by default the option is enabled for a
library lookup to overrule the DNS validation of the host-
name in the certificate.
A S
DMINISTRATOR ECTION
C 1: S
HAPTER YSTEM SCREEN
75