Library > Teacher U
- What the General module settings do
- How to use them to configure the inline filter; basic behavior for all Web Filter module modes; blocked website reviewers
The General module settings control the inline filter, the basic behavior for Web Filter module modes, and the blocked website reviewers.
Inline filter settings include: Decode SSL certificates, Bypass on failure, Block P2P networks, Block proxies requests Basic Behavior settings include: block Google encrypted search, secure access page, and YouTube for Schools Blocked website reviewer settings include: email addresses for designated reviewers
We’ll review each of these section and their settings.
Use the General page to configure the basic functions of the Web Filter module. Click Save to save any changes you make.
Inline Filter
Decode SSL Certificates – Through various methods, including (among others) decoding of SSL Certificates and SNI extension to TLS, the Lightspeed Systems Web Filter can determine the site that a user is attempting to visit through SSL. The Lightspeed Systems Web Filter looks up the host in the database, and applies the appropriate policies.
Notes:
Because of the nature of SSL traffic, the Lightspeed Systems Rocket does not display the Access Page when blocking an HTTPS session.
A detailed technical discussion of SSL is outside the scope of this document. For technical information on SSL and related security topics, refer to the Wikipedia article on Transport Layer Security here.
Bypass on failure – This setting controls how the Lightspeed Systems Web Filter should handle traffic in the event of hardware or software failure, or power loss. Select (check) this check box to allow unfiltered traffic to pass through the network interfaces. Unselect (uncheck) to block all traffic and disable all Internet access.
Block P2P networks – Peer to Peer (P2P) protocols such as BitTorrent and Skype can use up large amounts of bandwidth. They can also be a source of unwanted content such as viruses, trojans, inappropriate or infringing downloads. Select (check) this check box to block all unidentified UDP traffic. Enabling this option will block Skype, UltraSurf type traffic, and file-sharing networks such as BitTorrent.
Warning: Possible overblocking with the Block P2P networks option.
Enabling the Block P2P networks option could cause overblocking. Therefore, to prevent this, Lightspeed Systems recommends that you use P2P exclusions to allow specific traffic.
Block proxied requests – Users often attempt to bypass content filters by connecting to a proxy server, which disguises or encrypts traffic to escape detection. The Lightspeed Systems Web Filter uses advanced proxy detection and traffic analysis to block known and unknown proxy servers. Select (check) this check box to block proxy server connections.
P2P Exclusions
If you enabled the Block P2P networks option above you can use this table to exclude specified external IP addresses of peer-to-peer (P2P) sites.
Perform the following to add a new P2P exclusion list.
- 1. Click Add P2P Exclusion. The following will be displayed.