Kerio Tech KERIO WINROUTE FIREWALL 6, Руководство администратора

Страница: 154 / 368

Chapter 12 HTTP and FTP filtering
154
HTTP Inspection Advanced Options
Click on the Advanced button in the HTTP Policy tab to open a dialog where parameters for
the HTTP inspection module can be set.
Figure 12.5 HTTP protocol inspector settings
Use the Enable HTTP Log and Enable Web Log options to enable/disable logging of HTTP
queries (opened web pages) to the HTTP log (see chapter 22.10 ) and to the Web log (refer to
chapter 22.14 ).
Log format can be chosen for the Enable HTTP Log item: Apache access log
(
http://www.apache.org/
) or Squid proxy log (
http://www.squid-cache.org/
). This may
be important especially when the log would be processed by a specific analysis tool.
Both HTTP and Web logs are enabled by default. The Apache option is selected by default for
its better reference.
Use the Apply filtering rules also for local server to specify whether content filtering rules will
be applied to local WWW servers which are available from the Internet (see chapter 7 ). This
option is disabled by default — the protocol inspector only scans HTTP protocol syntax and
performs logging of queries ( WWW pages) according to the settings.
12.3 Content Rating System (Kerio Web Filter)
The Kerio Web Filter module enables WinRoute to rate web page content. Each page is sorted
into predefined categories. Access to the page will be either permitted or denied according to
this classification.
Kerio Web Filter uses a dynamic worldwide database which includes URLs and classification of
web pages. This database is maintained by special servers that perform page ratings. When-
ever a user attempts to access a web page, WinRoute sends a request on the page rating.