Configuring Integrated Web Filtering in ScreenOS (NSM Procedure)

Web filtering enables you to manage Internet access by preventing access to inappropriate Web content. For more information on antispam and Web filtering, see the Concepts & Examples ScreenOS Reference Guide. Use the Web Filtering option to manage Internet access and prevent access to inappropriate Web content.

To configure a security device for Web filtering:

  1. Install a Web license key to enable the Web Filtering option on the security device. For details, see “Managing Devices” section of the Network and Security Manager Administration Guide. To check the status of the Web Filtering option for a device, double-click the device configuration and select Info > Capabilities. If the license has been installed, Web filtering (Integrated) is enabled.
  2. Configure at least one Domain Name Server (DNS) so the security device can resolve the SurfControl CPA server name to an address. For information about DNS, see DNS Server Configuration Using DNS Settings.
  3. Select a Web filtering method and configure the Web filtering settings on the security device. You can select one of the following Web filtering methods for each security device:
    • Integrated Web Filtering (SurfControl CPA)—Block or permit access to a requested website by binding a SurfControl-defined or custom Web filtering profile to a firewall rule for the security device. A Web filtering profile contains Web categories (list of predefined or custom URLs) and the action the security device takes (permit or block) when it receives a request to access a URL.
    • Redirect Web Filtering (SurfControl SCFP)—Block or permit access to different web sites based on SurfControl-defined URLs, domain names, and IP addresses.
    • Redirect Web Filtering (Websense)—Block or permit access to different websites based on Websense-defined URLs, domain names, and IP addresses.

Optionally, you can define categories and profiles. You can also assign a Web filtering profile to a firewall rule. For information, see the Network and Security Manager Administration Guide.

Related Documentation