ZyXEL Communications 5 Series User Manual

Page 301

ZyWALL 5/35/70 Series User’s Guide

Chapter 16 Content Filtering Screens

301

Restrict Web Features

Select the check box(es) to restrict a feature. When you try to access a page
containing a restricted feature, the whole page will be blocked or the
restricted feature part of the web page will appear blank or grayed out. You
will also see the message and URL you configured in the Denied Access
Message and Redirect URL fields.

Block

ActiveX

ActiveX is a tool for building dynamic and active web pages and distributed
object applications. When you visit an ActiveX web site, ActiveX controls are
downloaded to your browser, where they remain in case you visit the site
again.

Java Applet

Java is a programming language and development environment for building
downloadable Web components or Internet and intranet business
applications of all kinds.

Cookies are files stored on a computer’s hard drive. Some web servers use
them to track usage and provide service based on ID.

Web Proxy

A server that acts as an intermediary between a user and the Internet to
provide security, administrative control, and caching service. When a proxy
server is located on the WAN it is possible for LAN users to circumvent
content filtering by pointing to this proxy server.

This option blocks traffic that has a destination port of 80, 119, 3128, or 8080
and includes HTTP "Get" and "Proxy-Connection" commands.

Schedule to Block

Content filtering scheduling applies to the Filter List, Customized sites and
Keywords. Restricted web server data, such as ActiveX, Java, Cookies and
Web Proxy are not affected.

Always Block

Click this option button to have content filtering always active with Time of
Day limitations not enforced. This is enabled by default.

Block From/To

Click this option button to have content filtering only active during the time
interval specified. In the Block From and To fields, enter the time period, in
24-hour format, during which content filtering will be enforced.

Message to display
when a site is blocked

Denied Access
Message

Enter a message to be displayed when a user tries to access a restricted web
site. The default message is “Please contact your network administrator!!”.

Redirect URL

Enter the URL of the web page to which you want to send users when their
web access is blocked by content filtering. The web page you specify here
opens in a new frame below the denied access message.

Use “http://” followed by up to 120 ASCII characters. For example, http://
192.168.1.17/blocked access.

Exempt Computers

Enforce content filter
policies for all
computers

Select this checkbox to have all users on your LAN follow content filter
policies (default).

Include specified
address ranges in the
content filter
enforcement

Select this checkbox to have a specific range of users on your LAN follow
content filter policies.

Exclude specified
address ranges from the
content filter
enforcement

Select this checkbox to exempt a specific range of users on your LAN from
content filter policies.

Add Address Ranges

Table 88 SECURITY > CONTENT FILTER > General

LABEL

DESCRIPTION