WF G
LOBAL
A
DMINISTRATOR
S
ECTION
C
HAPTER
1: S
YSTEM
SCREEN
M86 S
ECURITY
U
SER
G
UIDE
83
HTTPS Filtering
Specify your preference for filtering HTTPS sites in the
HTTPS Filtering frame. Select from the following settings for
the
HTTPS Filtering Level
:
•
“None” - if you do not want the Web Filter to filter HTTPS
sites
•
“Low” - if you want the Web Filter to filter HTTPS sites
without having the Web Filter communicate with IP
addresses or hostnames of HTTPS servers
•
“Medium” - if you want the Web Filter to communicate
with HTTPS servers in order to get the URL from the
certificate for URL validation only (this is the default
setting)
If "Medium" is selected, by default the option is enabled
for forwarding the DNS lookup in order to validate the
hostname in the certificate
•
“High” - if you want the Web Filter to communicate with
HTTPS servers to obtain the certificate with a very strict
validation of the return URL
If "High" is selected, by default the option is enabled for a
library lookup to overrule the DNS validation of the host-
name in the certificate.
WARNING
: If using the “High” setting, end users may be blocked
from accessing acceptable Web sites if the host names of these
sites do not match their generated certificates. To allow users
access to acceptable HTTPS sites, the IP addresses and corre-
sponding URLs of these sites should be included in a custom
library category that is allowed to pass. (See the Custom library
category sub-section in Chapter 2: Library screen from the WF
Group Administrator Section for information on setting up a
custom library category. See Global Group Profile window and
Minimum Filtering Level window in Chapter 2: Policy screen for
information on allowing a library category to pass.)
