8e6 Technologies ProxyBlocker manual Https Filtering

GLOBAL ADMINISTRATOR SECTION CHAPTER 1: SYSTEM SCREEN

HTTPS Filtering

Specify your preference for filtering HTTPS sites in the HTTPS Filtering frame. Select from the following settings for the HTTPS Filtering Level:

•“None” - if you do not want the ProxyBlocker to filter HTTPS sites

•“Low” - if you want the ProxyBlocker to filter HTTPS sites without having the ProxyBlocker communicate with IP addresses or hostnames of HTTPS servers

•“Medium” - if you want the ProxyBlocker to communicate with HTTPS servers in order to get the URL from the certificate for URL validation only (this is the default setting)

If "Medium" is selected, by default the option is enabled for forwarding the DNS lookup in order to validate the hostname in the certificate

•“High” - if you want the ProxyBlocker to communicate with HTTPS servers to obtain the certificate with a very strict validation of the return URL

If "High" is selected, by default the option is enabled for a library lookup to overrule the DNS validation of the host- name in the certificate.

WARNING: If using the “High” setting, end users may be blocked from accessing acceptable Web sites if the host names of these sites do not match their generated certificates. To allow users access to acceptable HTTPS sites, the IP addresses and corre- sponding URLs of these sites should be included in a custom library category that is allowed to pass. (See the Custom Catego- ries sub-section in Chapter 3: Library screen for information on maintaining the ALLOW and PASS custom library categories. See Global Group Profile window and Minimum Filtering Level window in Chapter 2: Group screen from the Global Administrator Section for information on allowing a library category to pass.)

8E6 TECHNOLOGIES, PROXYBLOCKER USER GUIDE 57