M86 Security M86 Threat Analysis Reporter, Руководство пользователя

Страница: 67 / 938

W
EB
F
ILTER
I
NTRODUCTORY
S
ECTION
C
HAPTER
2: L
OGGING AND
B
LOCKING
M86 S
ECURITY
U
SER
G
UIDE
39
service should be blocked, and then performs the appro-
priate action.
WARNING : The following items are known issues pertaining to
the IM module:
• IM can only block by destination IP address if network traffic is
being tunneled, sent through a Virtual Private Network (VPN),
or encrypted.
• IM will not be blocked if a client-side VPN is set up to proxy
traffic through a remote IP address outside the connection
protected by the Web Filter.
• Some versions of the AOL client create a network interface that
send a network connection through a UDP proxy server, which
prevents blocking IM.
P2P Blocking
Peer-to-Peer (P2P) involves communication between
computing devices—desktops, servers, and other smart
devices—that are linked directly to each other. Using this
feature of the Web Filter, groups and/or individual client
machines can be set up to block the use of P2P services
specified in the library category.
When the P2P module is loaded on the server, the Web
Filter compares packets on the network with the P2P library
stored on the Web Filter. If a match is found, the Web Filter
checks the user’s profile to see whether the user’s connec-
tion to the P2P service should be blocked, and then
performs the appropriate action.