bt-WebFilter Best Practices

Recommended EPM Solution 1

Block 'legal liability' web sites containing. Sex, Criminal Skills, Extreme and Violent, Gambling, Hate Speech, and Hacking for all users all day every day. Also, for those same users, allow access to Entertainment, Humor, Shopping and Sports before and after normal business hours, and during lunch period. Also, limit the amount of time or bandwidth for each user for the restricted 'Entertainment', 'Humor', etc. websites.

After starting the bt-WebFilter management console:

Step 1 - Create a Schedule for the 'Allow' periods for Sports, etc.

right-click Schedules in the left navigation tree, select 'New Schedule'

click Properties

hold down the left mouse button dragging to select appropriate time period

click the Active radio button

click Apply and OK

Step 2 - Create a Schedule for the 'Deny' periods for Sports, etc.

right-click Schedules in the left navigation tree, select 'New Schedule'

click Properties

hold down the left mouse button dragging to select appropriate time period

click the Active radio button

click Apply and OK

Step 3 - Create a Quota for Entertainment, Sports, etc.

right-click Quota in the left navigation tree, select 'New Quota'

select Daily, Weekly or Monthly

select Strict (block after quota is reached) or Lite (report only after quota reached)

input Bandwidth (KB) limit and/or Time limit

click Apply and OK

Step 4 - Apply the 'allow' policy to Users.

under the domain, right-click 'Domain Users' in the left navigation tree

select Properties

click Allow tab

click Add

in the new popup window, click Details

check boxes for Entertainment, Humor, Shopping, and Sports

click Schedule tab and from the drop down list, select the new 'allow' schedule created in step 1

click Quota tab, from the drop down list, select the new Quota created in step 3

click Apply and OK

Step 5 - Apply the 'deny' policy to Users.

click Deny tab

click Add

in the new popup window, click Details

check boxes for Entertainment, Humor, Shopping, and Sports

click Schedule tab and from the drop down list, select the new 'deny' schedule created in step

check boxes for Sex, Criminal Skills, Extreme and Violent, Gambling, Hate Speech, Hacking

click Schedule tab and from the drop down list, select '24 X7'

click Apply and OK

top

Exempting Specific User from EPM Solution 1

Exempting users like upper management or domain administrators from this policy

After starting the bt-WebFilter management console:

right-click Domain in the left navigation tree, select Properties

click Full Access Users tab

click Add

select the appropriate user from the Active Directory user list

click Add

click OK

top

Setting a Quota and applying it to a group
After opening the WebFilter Management Console

Defining the Quota

right-click on 'Quotas'
select 'New Quota'
select 'Daily', 'Weekly' or 'Monthly'
select 'Strict' to block after quota is reached or 'Lite' to report only
enter the appropriate bandwidth and/or time

Applying the Quota

right-click on the appropriate Group
select the 'Allow' tab
click 'Add'
select the 'Details' tab
NOTE: to apply a single quota for all Internet access, before clicking the Details tab, check the URL radio button, then enter a single asterisk (*) in the Details.
check the box for the appropriate category or categories
click the 'Quota' tab
select the quota from the drop-down list
select 'same quota for each group member' or 'single quota for the group'
click 'Apply'

top

Assigning a Quota to a Specific User

After starting the bt-WebFilter management console:

right-click Domain in the left navigation tree, select Properties

click Personal Quota tab

click Add

click Add

select the appropriate user from the Active Directory user list

click Add

select the Quota from the drop down list

click OK

top

Customizing the Burstek Category List

Your organization has an Intranet or has subscribed to a web service (WSJ, OneSource, etc.) and all employees are encouraged to log onto this web site. You would like to easily generate a report of employee activity for this site or sites only.

After starting the bt-LogAnalyzer or bt-WebFilter management console:

Step 1 - Create a new category for the subscription web site.

right-click URL Control List in the left navigation tree, select 'New Category

in the new popup window, click Included URLs tab

click Add

enter a 'wildcard mask' for the website (i.e. if the website is Burstek and the site contains multiple web pages, enter *www.burstek.com* ) NOTE: all masks must start and end with an asterisk (*)

click OK

Step 2 - Create a new report for the category created in step 1

right-click Reports in the left navigation tree, select 'New Report

click the Customize tab

click the Edit button for Categories

click Select Individual Categories radio button

check the box next to the category created in step 1

click Apply and OK

NOTE:

To reduce the output, check Top Users Activity - Web Pages box and uncheck all other boxes.

To report on the top xx number of users, check the Maximum Report Lines box and enter the appropriate number

top

Customizing the Burstek Category List Part Two

Your organization would like to exclude a web page from one of the pre-defined categories.

After starting the bt-WebFilter or bt-LogAnalyzer management console:

Step 1 - Exclude a web site or web page from a known category.

click the plus sign(+) next to the URL Control List in the left navigation tree

click the plus sign(+) next to the appropriate category name

click the plus sign(+) next to Excluded URLs

right-click on Own URLs

select New URL

enter a 'wildcard mask' for the website (i.e.enter *www.burstek.com* )

NOTE: all masks must start and end with an asterisk (*)

click OK

top

Replicating policies and settings across multiple servers
If you have multiple proxies, you can keep all servers in sync with filtering policies, Active Directory changes, URL Category List updates.

After starting the WebFilter management console:

right-click the top node (your server name) in the left navigation tree

click Replication Options tab

click Add and enter the DNS or IP of the other servers (NOTE: each server must have Burstek's WebFilter software installed)

click Manual Replication button

click the Replicate Now button to initially synchronize all servers

click the Automatic Replication button

top

Applying a single quota to all Internet access
After starting the WebFilter management console:

right-click the 'Domain Users' group

select Properties

click the Allow tab

click Add button

click the Details tab

enter a single Asterisk (*)

click the Quota tab

enter and apply your quota (NOTE: Quota must be previously defined)

top