Owners manual

188 | Roles and Policies Aruba Instant 6.4.0.2-4.1 | User Guide
With content filter, you can:
l Allow all DNS requests to the non-corporate domains on a wireless or wired network to be sent to the open DNS
server. When the OpenDNScredentials are configured, the IAP uses these credentials to access OpenDNS to
provide enterprise-level content filtering. For more information, see Configuring OpenDNS Credentials on page
267
l Block certain categories of websites based on your organization policy. For example, if you block the web-
based-email category, clients who are assigned this policy will not be able to visit email-based websites such as
mail.yahoo.com.
l Prevent known malware hosts from accessing your wireless network.
l Improve employee productivity by limiting access to certain websites.
l Reduce bandwidth consumption significantly.
Regardless of whether content filtering is disabled or enabled, the DNS requests to
http://instant.arubanetworks.com are always resolved internally on Instant.
The content filtering configuration applies to all IAPs in the network and the service is enabled or disabled globally
across the wireless or wired network profiles.
Enabling Content Filtering
This section describes the following procedures:
l Enabling Content Filtering for a Wireless Profile on page 188
l Enabling Content Filtering for a Wired Profile
Enabling Content Filtering for a Wireless Profile
To enable content filtering for a wireless SSID, perform the following steps:
In the Instant UI
1. Select a wireless profile in the Networks tab and then click the edit link. The window for editing the WLAN SSID
profile is displayed.
2. Click Show advanced options.
3. Select Enabled from the Content Filtering drop-down list, and click Next to continue.
You can also enable content filtering while adding a new wireless profile. For more information, see Configuring
WLAN Settings for an SSID Profile on page 93.
In the CLI
To enable content filtering on a WLAN SSID:
(Instant AP)(config)# wlan ssid-profile <name>
(Instant AP)(SSID Profile <name>)# content-filtering
(Instant AP)(SSID Profile <name>)# end
(Instant AP)# commit apply
Enabling Content Filtering for a Wired Profile
To enable content filtering for a wired profile, perform the following steps:
In the Instant UI
1. Click the Wired link under More at the top right corner of the main window. The Wired window is displayed.
2. In the Wired window, select the wired profile to modify.