WinGate 7 - Restrict downloads and prefabricated blacklists

[Tim_H]

Hi @all,

Our company just started to use WinGate 7 as proxy.
The documentary is very usefull but can't answer all my questions so I decided to ask here.

First: Is there any possibility to restrict downloads of a specified filetype? e.g. restrict any .exe downloads. I found an old thread but it was for WinGate 6 and we use WinGate 7.
Second: Where can I get a blacklist for unwanted sites like pornsites and so on? To filter all sites manually would take too much time. Does PureSight come with a good filled blacklist?
Is there another chance to block as most sites as possible like blocking the word "porn" in the url? My testconfiguration ("If URL" - "matches text" - "porn" - "classify as banned") didn't worked.


Maybe you could helped me.
Thank you in advance and have a nice christmas time.

Tim

[adrien]

Hi Tim

with that entry for porn, it would need to be wild-carded, e.g.

*porn* will match anything containing "porn". You then also must select Pattern matching as the match method in the list.

Regards

Adrien

[Tim_H]

Ok, you're right.

It worked, but do I have now the option to whitelist URL's which contain porn?
We have employees with a last name which includes the word porn, so if they have a personal homepage, the site still should be visible.

I've seen a policy wich checked if the user is manager and allowes "special" access. But i don't want to make special groups for this.

Thank you very much

Tim

PS: Some idea for my other questions?

[labull]

Puresight does much of what you want.

I also recommend you check out www.opendns.org . Their community based website evalualtion and flexible configuration will allow you shape where users can go on the Internet with confidence.

Let us know if this works for you.

Larry

[adrien]

To filter by content type, e.g. text/html, application/octet-stream etc, you need to evaluate policy when the response is received from the server, since this is where the information comes from (the server specifies the content type in its response).

You can attach policy to the ProxyResponse event and look at the content-type header. I believe there's a sample policy in WinGate 7 that does this.

Regards

Adrien