User guide

Getting Started with WebBlocker
User Guide 219
• Install or remove the server
• Start or stop the server
To run the WebBlocker utility, select Start => Programs => WatchGuard =>
WebBlocker Utility.
Configuring the WatchGuard service icon
Because WebBlocker relies on copying updated versions of the
WebBlocker database to the event processor, you must configure the
WatchGuard service setting Allow Outgoing to Any. It is possible to
narrow this setting and use the IP address of webblocker.watchguard.com.
However, this address may change without notice.
Add an HTTP service
To use WebBlocker, add the Proxied-HTTP, Proxy, or HTTP service.
WatchGuard recommends using Proxied-HTTP, which provides filtering
on all ports. (HTTP without the Proxy service manages only port 80.)
WebBlocker takes precedence over other settings in the HTTP or Proxy
services. If the HTTP service allows outgoing from Any to Any but
WebBlocker settings are set to “Block All URLs,” all Web access is
blocked. For information on adding an HTTP proxy service, see “Adding
a proxy service for HTTP” on page 121.
Configuring logging
Because WebBlocker works in conjunction with logging, you must
configure logging as described in Chapter 13, “Setting up Logging and
Notification.” WebBlocker logs attempts to access sites blocked by
WebBlocker. The log entry that is generated displays information about
the source and destination address as well as the blocked URL and the
category that caused the denial.
WebBlocker also generates a log entry showing the results of any
attempted database retrieval including whether or not it was successful
and, if not successful, why.