AVIRA ANTIVIR UNIX WEBGATE, User Manual

Page: 36 / 83

Configuration
Avira GmbH AntiVir WebGate
35
WebGate should assume after start (and thus turning in the root permissions).
User 65534
Group 65534
WebGate must first start as root. If you do not want this, you must specify the values for
User
and
Group
in the file /etc/avwebgate.conf .
AllowHTTPS
Tunnel
Allow HTTPS tunnel:
WebGate allows tunneling for SSL connections (HTTPS). As the data is encrypted,
it is not scanned. WebGate does not interfere with the transaction, it just forwards
the data. Due to this fact, it can not verify if the protocol being spoken is really
HTTP on top of SSL. For this reason, it allows only connections to ports 443
(HTTPS) and 563 (SNEWS). Default:
AllowHTTPSTunnel 0
The data transferred through the HTTPS tunnel will not be scanned by WebGate.
AllowedHTTP
ConnectPorts
Tunneling SSL-encrypted connections:
If you want to allow HTTPS connections to non-standard ports, you can do so by
adding the desired ports to this list. Each port will be separated by a comma or a
whitespace.
AllowedHTTPConnectPorts 443, 563
Max
Connections
Maximum number of connections allowed:
The maximum number of simultaneous connections allowed to run through
WebGate. A thread is created for every connection. The value sets the limit for the
number of connections or threads allowed simultaneously. Default:
MaxConnections 1024
Refresh/
Redirect/
Keepalive
Interval
Avoiding Client-timeouts by large downloads:
Some browsers and proxies send an error message, if no data is received after a
certain interval (timeout). WebGate may come to such timeout messages, because
of delays during large downloads and scanning.
In order to avoid timeouts, WebGate offers three possibilities. The entries are
given in seconds.
z If the Client is a browser, WebGate sends an HTML progress page, which is
updated at regular intervals. Default:
RefreshInterval 0
z
If the option
RefreshInterval
is deactivated or the Client is not a browser,
(temporary) HTTP redirects are sent to the Client. Thus, the Client is cyclically
redirected to a dynamic-generated URL, intercepted by WebGate in order to
avoid the timeout. Default:
RedirectInterval 0