User guide

User Guide 203
WebBlocker
5. Type a number, in minutes, in the Inactivity Timeout field.
The Inactivity Timeout field shows the length of time the full access password is active if no web
browsing is done. If a user types the full access password and no HTTP or HTTPS traffic is sent from that
user’s computer for the length of time set in the Inactivity Timeout field, WebBlocker rules start again.
The value can be from 1 to 1440 minutes.
6. Use the When the WebBlocker Server is unavailable, access to all sites is drop-down list to select if
the Firebox X Edge is to allow or deny all traffic when it cannot connect to the WebBlocker Server.
If you allow web traffic when the WebBlocker Server is unavailable, each user who sends a web request
must wait 45 seconds for the Firebox X Edge to try to connect to the WebBlocker Server and time out.
After 45 seconds, the Edge allows access to the web site. When the Edge can connect to the
WebBlocker Server again, it will automatically start to apply WebBlocker rules again.
7. Use the When the WebBlocker license expires, access to all sites is drop-down list to select if the
Firebox X Edge is to allow or deny all web traffic if the WebBlocker subscription expires.
If the WebBlocker subscription is renewed, the Firebox X Edge keeps the previous configuration and applies
WebBlocker rules again.
8. By default, WebBlocker connects to a WebBlocker Server maintained by WatchGuard to check to see if
a web site matches a WebBlocker category. If you prefer, you can install and maintain your own
WebBlocker Server on your local network. If you have install WebBlocker Server on a computer in your
local network, select the Use a custom WebBlocker Server check box. Type the IP address of the
server in the adjacent text box.
For instructions on how to install your own WebBlocker Server, see Install the Quarantine Server and
WebBlocker Server.
9. Click Submit.
WebBlocker shows users a deny message when it blocks access to a web site. You can customize this
message when you configure your HTTP proxy policy. For more information, see HTTP proxy: Deny
message.