8e6 Technologies ProxyBlocker Manual Do Utilizador
G
LOBAL
A
DMINISTRATOR
S
ECTION
C
HAPTER
1: S
YSTEM
SCREEN
8
E
6 T
ECHNOLOGIES
, P
ROXY
B
LOCKER
U
SER
G
UIDE
57
HTTPS Filtering
Specify your preference for filtering HTTPS sites in the
HTTPS Filtering frame. Select from the following settings for
the HTTPS Filtering Level:
HTTPS Filtering frame. Select from the following settings for
the HTTPS Filtering Level:
• “None” - if you do not want the ProxyBlocker to filter
HTTPS sites
• “Low” - if you want the ProxyBlocker to filter HTTPS sites
without having the ProxyBlocker communicate with IP
addresses or hostnames of HTTPS servers
addresses or hostnames of HTTPS servers
• “Medium” - if you want the ProxyBlocker to communicate
with HTTPS servers in order to get the URL from the
certificate for URL validation only (this is the default
setting)
certificate for URL validation only (this is the default
setting)
If "Medium" is selected, by default the option is enabled
for forwarding the DNS lookup in order to validate the
hostname in the certificate
for forwarding the DNS lookup in order to validate the
hostname in the certificate
• “High” - if you want the ProxyBlocker to communicate
with HTTPS servers to obtain the certificate with a very
strict validation of the return URL
strict validation of the return URL
If "High" is selected, by default the option is enabled for a
library lookup to overrule the DNS validation of the host-
name in the certificate.
library lookup to overrule the DNS validation of the host-
name in the certificate.
WARNING: If using the “High” setting, end users may be blocked
from accessing acceptable Web sites if the host names of these
sites do not match their generated certificates. To allow users
access to acceptable HTTPS sites, the IP addresses and corre-
sponding URLs of these sites should be included in a custom
library category that is allowed to pass. (See the Custom Catego-
ries sub-section in Chapter 3: Library screen for information on
maintaining the ALLOW and PASS custom library categories.
See Global Group Profile window and Minimum Filtering Level
window in Chapter 2: Group screen from the Global Administrator
Section for information on allowing a library category to pass.)
from accessing acceptable Web sites if the host names of these
sites do not match their generated certificates. To allow users
access to acceptable HTTPS sites, the IP addresses and corre-
sponding URLs of these sites should be included in a custom
library category that is allowed to pass. (See the Custom Catego-
ries sub-section in Chapter 3: Library screen for information on
maintaining the ALLOW and PASS custom library categories.
See Global Group Profile window and Minimum Filtering Level
window in Chapter 2: Group screen from the Global Administrator
Section for information on allowing a library category to pass.)