User's Manual

ProSecure Web/Email Security Threat Management (STM) Appliance Reference Manual
4-22 Content Filtering and Optimizing Scans
v1.0, September 2009
Configuring Web and Services Protection
The STM lets you configure the following settings to protect the network’s Internet
communication:
• The Web protocols that are scanned for malware threats.
• Actions that are taken when infected Web files or objects are detected.
• The maximum file sizes that are scanned.
• Web objects that are blocked.
• Web categories, keywords, and file types that are filtered to block objectionable or high-risk
content.
• Domains and URLs that are blocked for objectionable or high-risk content.
• Customer notifications and e-mail alerts that are sent when events are detected.
• Schedules that determine when content filtering is active.
Customizing Web Protocol Scan Settings
If you have used the Setup Wizard, you might have already configured the Web protocol scan
settings; the (Web) Policy screen allows you to modify these settings.
Scanning all protocols enhances network security, but might affect the performance of the STM.
For an optimum balance between security and performance, only enable scanning of the most
commonly used protocols on your network. For example, you can scan FTP and HTTP, but not
HTTPS (if this last protocol is not often used). For more information about performance, see
“Performance Management” on page 3-31.
To specify the Web protocols and ports that are scanned for malware threats.
1. Select Web Security > Polices from the menu. The (Web) Policy screen displays (see
Figure 4-9 on page 4-23).