User's Manual

ProSecure Web/Email Security Threat Management (STM) Appliance Reference Manual
4-26 Content Filtering and Optimizing Scans
v1.0, September 2009
3. Click Apply to save your settings.
Configuring Web Content Filtering
If you want to restrict internal LAN users from access to certain types of information and objects
on the Internet, use the STM’s content filtering and Web objects filtering. With the exception of the
Web content categories that are mentioned in “Default E-mail and Web Scan Settings” on
page 4-2, all requested traffic from any Web site is allowed. You can specify a message such as
“Blocked by NETGEAR” that is displayed on screen if a user attempts to access a blocked site (see
the Notification Settings section that is described at the bottom of Table 4-11 on page 4-30).
Several types of Web content blocking are available:
• File extension blocking. You can block files based on their extension. Such files can include,
executable files, audio and video files, and compressed files.
• Web object blocking. You can block the following Web objects: embedded objects (ActiveX,
Java, Flash), proxies, and cookies, and you can disable Java scripts. However, Web sites that
are on the whitelist (see “Configuring Web URL Filtering” on page 4-32) are never subject to
Web object blocking.
• Web category blocking. You can block entire Web categories because their content is
undesired, offensive, or not relevant, or simply to reduce traffic.
Note: You can customize this text. Make sure that you keep the %VIRUSINFO% meta word in the text to
enable the STM to insert the proper malware threat information. In addition to the %VIRUSINFO% meta
word, you can insert the following meta words in your customized message:
%TIME%, %PROTOCOL%, %FROM%, %TO%, %SUBJECT%, %FILENAME%, %ACTION%,
%VIRUSNAME%.
The text is displayed on the Malware Scan screen with HTML tags. Click Preview to open a screen that
displays the notification text in HTML format.
Note: You can bypass any type of Web blocking for trusted domains by adding the exact
matching domain names to the trusted host list (see “Specifying Trusted Hosts” on
page 4-39). Access to the domains on the trusted host list is allowed for PCs in the
groups for which file extension, object, or category blocking, or a combination of
these types of Web blocking has been enabled.
Table 4-10. Malware Scan Settings (continued)
Setting Description