Ban List

[IanM]

I have downloaded the evaluation version and it works fine as a proxy service – I am using the WGIC approach on client computers. I’ve tried using Puresight without a lot of success – with full lock-down on sex and gambling even www.microsoft.com gets denied. I then turned to WWW Proxy Service policies and set up a ban list for everyone with ‘xxx’ in the URL name and xxx.com in the server – didn’t work www.xxx.com gets through – what am I doing wrong ?

[Pascal]

Are you intercepting on the WWW Proxy Service?

[IanM]

Pascal,

I am evaluating this product hence the question. The documentaion that come with the product leaves a lot to be desired for such a complex piece of software that would ne left in the hands of non-skilled people to administer. I am thinking of installing a product in a primary school environment primarily to log access and make sure there is a full lock down on inappropriate material. I though the Puresight product might have give me this but I didn't have a lot of success there. The thought of having to define inappropriate material through policies makes me shudder when you consider how fast that type of material becomes available on the internet. To be honest after 6 hours of 'messing' around trying to understand the product without detailed documentation I'm beginning to lose faith in this product.

I don't know if I am intercepting because I didn't know I had to do that - perhaps you could elaborate.

[Pascal]

When you use the WinGate Internet Client (WGIC) or Network Address Translation (NAT) the traffic will not be going through the proxy. If you go into the WWW Proxy Service settings (GateKeeper -> Services -> WWW Proxy Service) and switch to the "Settings" tab you'll note that there is an option to Intercept traffic there. That intercept applies to NAT and WGIC. What happens then is that traffic is pulled from those services and redirected through the proxy, giving you the ability to use plugins (Such as Puresight and Kaspersky AntiVirus) and the ability to use more advanced, protocol based policies.

If you did not have intercepts turned on that could explain why PureSight was giving you such lack-lustre results as well. Hope that helps.