Installation guide
Table Of Contents
- Introduction
- Headquarters configuration
- Selection of IP addresses for LAN
- Configuration of network interfaces of the Internet gateway
- Kerio Control installation
- Kerio Control Administration interface and product activation
- Setting connection and basic traffic rules
- DHCP Server Configuration
- DNS configuration
- Web interface and SSL-VPN certificates
- Mapping of user accounts and groups from the Active Directory
- Address Groups and Time Ranges
- Web Rules Definition
- FTP Policy Configuration
- Antivirus Scanning Configuration
- Intrusion Prevention System
- Enabling access to local services from the Internet
- Secured access of remote clients to LAN
- LAN Hosts Configuration
- Viewing statistics of Internet usage and user browsing behavior
- Configuration of the LAN in a filial office
- Interconnection of the headquarters and branch offices
- Used open source items
- Legal Notices
Headquarters configuration
14
2.10 Address Groups and Time Ranges
Open the Configuration → Definitions → Address Groups section to create IP group Email
Access that will be used to limit access to email accounts (refer to chapter 2.15). This
group will consist of the 123.23.32.123 and 50.60.70.80 IP addresses and of the entire
195.95.95.128 network with the 255.255.255.248 network mask.
Note: Definition of the first group requires name of the new group, later additions allow
selection of an existing group.
Likely, go to Configuration → Definition → Time Ranges to create a time interval that will be
limited to accessing Internet services during the labor hours (from Monday to Friday from 8
A.M. to 4:30 P.M., Saturdays and Sundays from 8 A.M. to 12 A.M.).
You can use predefined day groups (Weekday or Weekend) to define the Valid on entry — it is
not necessary to tick each day individually.
2.11 Web Rules Definition
Requirements
Access to Web pages will be limited by the following restrictions:
• filtering of advertisements included in web pages,
• access to pages with erotic/sexual content is denied,
• access to Web pages that offer jobs is denied (only users working in Personal
Departments are allowed to access these pages),
• user authentication will be required before access to the Internet is allowed (this way
you can monitor which pages are opened by each user).
Ads filtering and blocking access to specific website categories
The following basic HTTP rules are already predefined and available in the URL Rules tab in
Configuration → Content Filtering → HTTP Policy:
• It recommended to keep rules Allow automatic updates for Kerio software and Allow
automatic updates and MS Windows activation enabled. Otherwise automatic updates
of Kerio Control and of the server’s operating system might stop working correctly.
• Rules Allow popular search engines and Remove advertisement and banners can be
used according to your needs.
• Rule Deny sites rated in Kerio Web Filter categoriescan be used to block all users access
to pages with erotic contents.