Installation guide
Table Of Contents
- Introduction
- Headquarters configuration
- Selection of IP addresses for LAN
- Configuration of network interfaces of the Internet gateway
- Kerio Control installation
- Kerio Control Administration interface and product activation
- Setting connection and basic traffic rules
- DHCP Server Configuration
- DNS configuration
- Web interface and SSL-VPN certificates
- Mapping of user accounts and groups from the Active Directory
- Address Groups and Time Ranges
- Web Rules Definition
- FTP Policy Configuration
- Antivirus Scanning Configuration
- Intrusion Prevention System
- Enabling access to local services from the Internet
- Secured access of remote clients to LAN
- LAN Hosts Configuration
- Viewing statistics of Internet usage and user browsing behavior
- Configuration of the LAN in a filial office
- Interconnection of the headquarters and branch offices
- Used open source items
- Legal Notices
2.12 FTP Policy Configuration
15
Use the Select Rating... button to select Kerio Web Filter categories that will be blocked.
Then select appropriate categories in the Pornography /Nudity section to deny access
to pages with erotic/sexual content.
On the Advanced tab, enter the text which will be displayed if a user to access a page
with forbidden content or set redirection to another webpage.
Restrictions of web pages with job offers
To restrict access to websites with job offers, use the following rules:
1. Add a rule allowing users from the Human Resources Department group to access pages
categorized by Kerio Web Filter as Job Offers.
2. Behind this rule, add a rule blocking access to the same category for any other users.
It is recommended not to require user authentication in this rule. This prevents from
redirecting unauthenticated users’ browser to the authentication page before showing the
information that the page is blocked.
User authentication for accessing Websites
The last optional restriction is user authentication while accessing Web pages. To enable this
feature, use the corresponding option under Users and Groups → Users, the Authentication
Options tab.
User authentication is performed within redirection to the Kerio Control web interface’s
authentication page. It is necessary that the web interface is enabled and all its parameters
set correctly (refer to chapter 2.8). Upon entering a valid username and password, the browser
will be redirected to the solicited page.
2.12 FTP Policy Configuration
Requirements
FTP usage will be limited by the following restrictions:
• transmission of music files in the MP3 format will be denied
• transmission of video files (
*
.AVI) will be denied within working hours
• uploads (storing files at FTP servers) will be denied — protection of important
company information