Kerio Tech KERIO WINROUTE FIREWALL 6, Руководство администратора

Страница: 147 / 368

147
Chapter 12
HTTP and FTP filtering
WinRoute provides a wide range of features to filter traffic using HTTP and FTP protocols.
These protocols are the most spread and the most used in the Internet.
Here are the main purposes of HTTP and FTP content filtering:
• to block access to undesirable Web sites (i.e. pages that do not relate to employees’
work)
•
to block certain types of files (i.e. illegal content)
• to block or to limit viruses, worms and Trojan horses
Let’s focus on filtering options featured by WinRoute . For their detailed description, read the
following chapters.
HTTP protocol
— Web pages filtering:
• access limitations according to URL (substrings contained in URL addresses)
• blocking of certain HTML items (i.e. scripts, ActiveX objects, etc.)
• filtering based on classification by the Kerio Web Filter module (worldwide website
classification database)
•
limitations based on occurrence of denied words (strings)
• antivirus control of downloaded objects
FTP protocol
— control of access to FTP servers:
• access to certain FTP servers is denied
• limitations based on or file names
• transfer of files is limited to one direction only (i.e. download only)
•
certain FTP commands are blocked
• antivirus control of transferred files
Note: WinRoute provides only tools for filtering and access limitations. Decisions on which
websites and files will be blocked must be made by the administrator (or another qualified
person).
12.1 Conditions for HTTP and FTP filtering
For HTTP and FTP content filtering, the following conditions must be met:
1. Traffic must be controlled by an appropriate protocol inspector.