8e6 Technologies Enterprise Filter Authentication R3000, Руководство пользователя

Страница: 100 / 594

G
LOBAL
A
DMINISTRATOR
S
ECTION
C
HAPTER
1: S
YSTEM SCREEN
76
8
E
6 T
ECHNOLOGIES
, R3000 E
NTERPRISE
F
ILTER
U
SER
G
UIDE
HTTPS Filtering
Specify your preference for filtering HTTPS sites in the
HTTPS Filtering frame. Select from the following settings for
the
HTTPS Filtering Level :
• “None” - if you do not want the R3000 to filter HTTPS
sites
• “Low” - if you want the R3000 to filter HTTPS sites
without having the R3000 communicate with IP
addresses or hostnames of HTTPS servers
• “Medium” - if you want the R3000 to communicate with
HTTPS servers in order to get the URL from the certifi-
cate for URL validation only (this is the default setting)
If "Medium" is selected, by default the option is enabled
for forwarding the DNS lookup in order to validate the
hostname in the certificate
• “High” - if you want the R3000 to communicate with
HTTPS servers to obtain the certificate with a very strict
validation of the return URL
If "High" is selected, by default the option is enabled for a
library lookup to overrule the DNS validation of the host-
name in the certificate.
WARNING : If using the “High” setting, end users may be blocked
from accessing acceptable Web sites if the host names of these
sites do not match their generated certificates. To allow users
access to acceptable HTTPS sites, the IP addresses and corre-
sponding URLs of these sites should be included in a custom
library category that is allowed to pass. (See the Custom library
category sub-section in Chapter 2: Library screen from the Group
Administrator Section for information on setting up a custom
library category. See Global Group Profile window and Minimum
Filtering Level window in Chapter 2: Group screen from the
Global Administrator Section for information on allowing a library
category to pass.)
NOTE : After making all entries in this window, click Apply .