Block File download .. with wingate only ..

[Abdul aziz]

Hi there,

i'm using wingate v.6.2.0 ..

i wanna block some download file ..

example : ( exe or rar file )

i don't use puresight plugin ..

i wanna use wingate Only ..

note : i'm using NAT ..


thanx for qbik team
and
help me please

Bye

[adrien]

Hi

To block certain types of web requests, the requests need to go through the web proxy. If you're using NAT you've got 2 options to get the traffic to go through the proxy.

a) configure clients to use the proxy directly (e.g. use an AD group policy for this) - recommended
b) configure the WWW proxy to intercept connections.

The reason we recommend (a) over (b), even though (b) is a lot easier to configure, is that

i) if you intercept connections, you have to choose which ports to intercept, and you won't catch HTTP traffic on non-standard ports. Configuring the browser to use the proxy however doesn't suffer from this.
ii) HTTP authentication works better when the browser knows it's talking to a proxy. HTTP was never designed to be intercepted. Especially NTLM can have problems with interception, or where you are connecting to a site that also uses HTTP authentication.

After you have the traffic going through the WWW proxy, you then implement policies in there about what type of requests you will allow.

[Abdul aziz]

adrien

thanx for replay ,, but i don't understand ..

how to configure A / B ..

i don't use wingate client

how i can ban this file download from ban list from www proxy service ( system Policies ) ??


thanx ..

[logan]

A. To configure the clients to use a WWW proxy server (instructions for Internet Explorer)

- Open up 'Internet Options'. This can be found in Internet Explorer under the Tools drop down menu, or in the Windows Control Panel.
- Go to the 'Connections' tab
- Click 'LAN settings'
- Enable 'Use a proxy server for your LAN...'
- Enter the IP address of your WinGate server, and the port of the WWW proxy service (usually port 80)
- Click OK, the OK to finalize the change


B. To configure WinGate to intercept all HTTP connections on port 80

- Open the WinGate 'GateKeeper' and login with an administrator user account
- Go to the 'Services' tab
- Double click on the 'WWW Proxy server' to open it's properties
- Go to the 'Sessions' section of the WWW Proxy properties
- Enable 'Intercept connections made via ENS...'
- Add port '80' to the list of ports that will be intercepted
- Click OK to finalize the change



Once your clients are making their connections through the WWW Proxy server, you can use the WWW Proxy server's policies to control what they can or can not access. Here is a knowledge base article that explains how to make a blacklist of websites that should be blocked. Blocking certain file types uses a very similar premise, but instead of specifying a domain that will be blocked, you can specify a file extension.

http://support.qbik.com/index.php?_a=kn ... ails&_i=96

[DrWho]

logan,

The kb article that you point to discusses using criteria and filters under the Advanced tab to construct a blacklist. I've had good success for many years using the Ban list tab instead, and I find that entry is a bit easier, especially since I have >500 banned criteria, and it's easier to browse the list since it automatically alphabetizes. Just for my information, what's the difference?

Now, I do find the criteria/filter method useful for constructing a whitelist.

Thanks.