ComSifter CS-8D Pro, User Manual, Page: 182 / 245

U S E R S
User Guide | ComSifter CS-8D Pro
6–16
blacklist. If so, the page is denied. If not, the ComSifter honors the browser’s request for a port at which time
the browser encrypts the data and the ComSifter is no longer able to see the data.
Pros

HTTPS transactions work properly, as ComSifter is not seen as a man-in-the-middle.

ComSifter has a chance to see if a site is on the blacklist—before it becomes encrypted.
Cons

Requires browser setup

May interfere with server packages (WSUS, Exchange, etc.), anti-virus software updates, etc., and will
require entering the proxy information into these programs. (Newer applications follow the proxy settings
used at the operating system level, making this less of an issue.)
Authenticating Proxy Mode
In addition to performing the functions of a standard proxy, an authenticating proxy also authenticates the user
to the proxy. This adds a layer of security to the ComSifter by only allowing authenticated users. More
importantly, it gives the ComSifter a method of automatically identifying the user. This data is then used by the
ComSifter to map the user to specific filters. This mode is required when using either Basic or NTLM
authentication methods.
Pros

Browser must authenticate with the proxy, which increases security, and gives the ComSifter a method of
retrieving a username automatically.

HTTPS transactions work properly, as ComSifter is not seen as a man-in-the-middle.

ComSifter has a chance to see if a site is on the blacklist—before it becomes encrypted.
Cons

Requires browser setup

May interfere with server packages (WSUS, Exchange, etc.), anti-virus software updates, etc., and will
require entering the proxy information into these programs. (Newer applications follow the proxy settings
used at the operating system level, making this less of an issue.)

May require additional debug to identify poorly written applications that are not proxy-aware.
Which is the right solution for our network?
Proxy mode is always the preferred setup. It is more robust—especially with HTTPS transactions—and gives
the network administrator much greater control over what client applications can access the Internet.
How to determine which proxy mode to use:
Basic NTLM IdentD IP No Authentication
Transparent Optional Optional Optional
Standard Proxy Optional Optional Optional
Authenticating Proxy Mandatory Mandatory