User manual

Table Of Contents
Reference: Configuration options
125
If this option is enabled, the web pages you request using an Internet browser are
scanned for viruses and malware. WebGuard monitors the data transferred from the
Internet using the HTTP protocol at ports 80, 8080, 3128. If any affected web pages are
detected, the loading of the web pages is blocked. If this option is disabled, the
WebGuard service is still started, but the scan for viruses and malware is disabled.
Drive-by protection
Drive-by protection allows you to make settings to block I-Frames, also known as inline
frames. I-Frames are HTML elements, i.e. elements of Internet pages that delimit an
area of a web page. I-Frames can be used to load and display different web content -
usually other URLs - as independent documents in a subwindow of the browser. I-
Frames are mostly used for banner advertising. In some cases, I-Frames are used to
conceal malware. In these cases the area of the I-Frame is mostly invisible or almost
invisible in the browser. The Block Suspect I-Frames option allows you to check and block
the loading of I-Frames.
Block suspicious I-frames
If this option is enabled, I-Frames on the web pages you request are scanned according to
certain criteria. If there are suspect I-Frames on a requested web page, the I-Frame is
blocked. An error message (HTTP status code 403) is displayed in the I-Frame window.
Default
If this option is enabled, I-Frames with suspect content is blocked.
Advanced
If this option is enabled, I-Frames with suspect content and I-Frames used in a
suspicious way are blocked. The use of I-Frames is considered suspect if the I-Frame is
very small and is therefore invisible or almost invisible in the browser of if the I-Frame is
placed in an unusual position on the web page.
12.6.1.1. Action for concerning files
Action for concerning files
You can define the actions to be carried out by WebGuard when a virus or unwanted
program is detected.
Interactive
If this option is enabled, a dialog window appears when a virus or unwanted program is
detected during an on-demand scan, in which you can choose what is to be done with the
affected file. This option is enabled as the default setting.
Permitted actions
In this display box you can specify those actions that are to be displayed in the dialog box
in the event that a virus or unwanted program is detected. You must activate the
corresponding options for this.
Refuse access
The website requested from the web server and/or any data or files transferred are not
sent to your web browser. An error message to notify you that access has been denied is
displayed in the web browser. WebGuard logs the detection to the report file if the report
function is activated. WebGuard also appends an entry to the event log if the relevant
option is enabled.