Configuration
Avira GmbH
Avira AntiVir WebGate
27
WebGate should assume after start (and thus turning in the root permissions).
User 65534
Group antivir
WebGate must first start as root. If you do not want this, you must specify the values for
User
and
Group
in the file
/etc/avwebgate.conf
.
ScannerListen
Address
WebGate no longer starts the SAVAPI daemon. Instead it connects to a running
instance using a UNIX socket.
ScannerListenAddress /var/run/avwebgate/scanner
AllowHTTPS
Tunnel
Allow HTTPS tunnel:
WebGate allows tunneling for SSL connections (HTTPS). As the data is encrypted,
it is not scanned. WebGate does not interfere with the transaction, it just forwards
the data. Due to this fact, it can not verify if the protocol being spoken is really
HTTP on top of SSL. For this reason, it allows only connections to ports 443
(HTTPS) and 563 (SNEWS). Default:
AllowHTTPSTunnel no
The data transferred through the HTTPS tunnel will
not
be scanned by WebGate.
AllowedHTTP
ConnectPorts
Tunneling SSL-encrypted connections:
If you want to allow HTTPS connections to non-standard ports, you can do so by
adding the desired ports to this list. Each port will be separated by a comma or a
whitespace.
AllowedHTTPConnectPorts 443, 563
Max
Connections
Maximum number of connections allowed:
The maximum number of simultaneous connections allowed to run through
WebGate. A thread is created for every connection. The value sets the limit for the
number of connections or threads allowed simultaneously. Default:
MaxConnections 1024
Refresh/
Redirect/
Keepalive
Interval
Avoiding Client-timeouts by large downloads:
Some browsers and proxies send an error message, if no data is received after a
certain interval (timeout). WebGate may come to such timeout messages, because
of delays during large downloads and scanning.
In order to avoid timeouts, WebGate offers the following possibilities. The entries
are given in seconds.
•
If the Client is a browser, WebGate sends an HTML progress page, which is
updated at regular intervals. Default:
RefreshInterval 0
If you modify this parameter, you must also change the value for
ListenAddress
in
/etc/avwebgate-scanner.conf.
See
Scanner Configuration in avwebgate-scanner.conf
–
Page 33
