© 2010 Office Efficiencies (India) Pvt. Ltd. Total Access Control Total Content Control Granular Scalable ManageableI Web Filtering Concepts © 2010 Office Efficiencies (India) Pvt. Ltd. Table of Contents Part I Web Filtering Concepts 1 1 How to res.t..r.i.c..t. .a..c..c..e..s..s.. .t.o... .w..e..b...s..i.t.e..s..,. .b..a..s..e..d.. .o..n... .t.h..e..i.r. .U...R...L.. ...................................................... 1 2 How to cre.a..t..e.. .a..n..d.. .u..s..e.. .c..a..t..e..g..o..r.i.z..e..d.. .l.i.s..t..s.. .o..f. .w...e..b..s..i.t.e..s.. .w...i.t.h.. .S...a..f.e..S..q...u..i.d.. ................................. 1 3 How to to .d..e..t.e..c..t. .u..n...a..c..c..e..p..t.a..b..l.e.. .c..o..n...t.e..n..t.,. .b..y.. .u...s..i.n..g.. .P..C...R...E.. .b..a..s..e..d.. .l.o...g..i.c..a..l. .a..n..a..l.y..s..i.s.. ............... 1 4 How to res.t..r.i.c..t. .a..c..c..e..s..s.. .t.o... .c..o..n..t.e..n...t. .b..a..s..e..d.. .o..n... .t.h..e..i.r. .d...a..t.a.. .t.y..p..e..,. .l.i.k..e.. .i.m...a..g...e..s..,. .a..u..d..i.o.. ./. .v..i.d..e..o...,. .e. tc. 2 5 How to lim.i.t. ..u..s..e..r.s.. .a..c..c..e..s..s.. .t.o... .p..r.i.v..a..t.e.. .a..p...p..l.i.c..a..t.i.o..n..s.. .w...i.t.h...o..u..t. .b..l.o...c..k..i.n..g.. .t.h...e.. .e..n..t.i.r.e.. .w...e..b..-..s..i.t.e.. .. 2 6 How to enf.o...r.c..e.. ."..S..a..f.e..S...e..a..r.c..h..".. .o..n.. .s..e..a..r..c..h.. .e..n..g..i.n...e.. .q..u..e..r.i.e..s.. ...................................................... 2 7 How to cre.a..t..e.. .u..s..e..r. .b..a..s..e..d... .p..r.o..f..i.l.e..s.. .a..n..d.. .l.i.m...i.t. .t..h..e.. .o..v..e..r.a..l.l. ..a..c..c..e..s..s.. .b..a..s..e..d.. .o..n.. .s..u...c..h.. .p..r.o...f.i.l.e..s.. .. 2 Index 0Web Filtering Concepts 1 © 2010 Office Efficiencies (India) Pvt. Ltd. 1 Web Filtering Concepts 1.1 How to restrict access to websites, based on their URL SafeSquid's URL filter section can be used to block access to URLs based on ther host name and /or file path. If the URL is denied, an error page template is sent to the web browser. URL filter can not only be used to block access to specific websites, but it can also be used to very effectively and granularly block specific objects like banners and advertisement, search engine queries, URLs containing specific words like 'sex' or 'mail', and access to IMs and Chats like Yahoo Messenger, Google Talk, Rediff Bol, etc. This section is related to technical Discussions, queries and solutions regarding URL access control using URL Filtering. 1.2 How to create and use categorized lists of websites with SafeSquid SafeSquid allows you to use any flat-file URL blacklist, like the ones available at www.urlblacklist. com and www.shallalist.de, to restrict access to websites based on content category like porn, adult, webmail, jobsearch, entertainment, etc. These sites maintain a well categorized list of various websites and pages. This is an excellent resource for an administrator seeking to granularly enforce a corporate policy that allows or disallows only certain kinds of web-sites to be accessible by specific users, groups or networks. This section is related to technical Discussions, queries and solutions regarding URL access control using URL Blacklist. 1.3 How to to detect unacceptable content, by using PCRE based logical analysis SafeSquid's Keyword Filtering allows you to block pages which may contain inappropriate content, using a weighed keyword scoring system. When the host, file, mime-type, and keyword in an entry matches, it's score is added to the total score; when that total score exceeds the threshold, the page is deemed inappropriate and blocked. This is a very intelligent method of blocking websites, belonging a specific category, like porn, without depending on any databases like URL Blacklist. This section is related to technical discussions, queries and solutions regading blocking content using SafeSquid's Keyword Filter.2 Web Filtering Concepts © 2010 Office Efficiencies (India) Pvt. Ltd. 1.4 How to restrict access to content based on their data type, like images, audio /video, etc. SafeSquid's Mime filtering section allows you to filter content based on its Mime type, like audio, video, application, etc.; or file extensions like .exe, .zip, .mp3, etc. This section is related to technical discussions, queries and solutions on controlling access with MiMe Filtering. 1.5 How to limit users access to private applications without blocking the entire web-site SafeSquid's Cookie Filter allows you to choose which hosts, the browsers are allowed to send and receive cookies to and from. This section is related to technical discussions, queries and solutions on protecting privacy and security breaches with Cookie Filtering. 1.6 How to enforce "SafeSearch" on search engine queries This section is related to technical Discussions, queries and solutions for enforcing Google, Yahoo and Bing "SafeSearch", by redirecting 'unsafe' queries to 'safe' queries, and preventing accidental or intentional search for unwanted content on search-engines. 1.7 How to create user based profiles and limit the overall access based on such profiles SafeSquid provides very granular profiling of applications and content. These profiles can then be applied in the various filters to control the Internet access. In this section we discuss the nature of Internet access that should be allowed or denied or restricted based on various conditions. The discussions here are our "stepping-stone" to translating the Corporate Internet Access Policies into SafeSquid's configuration database.