Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 428 / 1026

Configuring Web Filtering Objects
Web Filtering (Integrated) enables you to create a Web Filtering profile for all of your
security devices by binding the profile to the firewall rule. With a Web Filtering profile,
the security device intercepts each HTTP request and determines whether to permit or
block access to a requested website by categorizing the URL and matching the Web
category to the Web Filtering profile. You can then bind the Web Filtering profile to the
firewall rule.
To configure a security device for Web Filtering, you need to:
•
Obtain a license key to enable the Web Filtering option on security devices.
•
Configure at least one Domain Name Server (DNS) so the security device can resolve
the SurfControl CPA server name to an address.
• Configure Web Filtering on the security device. For details, see Network and Security
Manager Configuring ScreenOS and IDP Devices Guide .
•
Web Categories on page 378
• Custom Lists on page 378
• Predefined Categories on page 379
Web Categories
A Web category is a list of URLs organized by content. There are two types of categories:
Custom Lists and Predefined Categories.
Custom Lists
You can group URLs and create custom lists specific to your needs. You can include up
to 20 URLs in each list. When you create a list, you can add either the URL or the IP address
of a website. When you add a URL to a custom list, the security device performs a Domain
Name Server (DNS) lookup, resolves the hostname into IP addresses and caches this
information.
When a user tries to access a website by typing the IP address of the website, the security
device checks the cached list of addresses and tries to resolve the hostname. It is
important to enter both the URL and the IP address(es) of a website.
NOTE: When a URL exists in both a custom list and a predefined category,
the security device matches the URL to the custom list first.
In this example you create a custom list called Competitors, Gaming.
1.
In the main navigation tree, select Object Manager > UTM >ScreenOS >Web Filtering
(Integrated)> Web categories > Custom Lists.
2.
Click the Add icon. The New Web categories dialog box appears.
3.
For Name, enter Competitors, Gaming .
Copyright © 2010, Juniper Networks, Inc. 378
Network and Security Manager Administration Guide