Bypassing the Soho WebBlocker | WatchGuard Technologies SOHO

Purchasing and enabling SOHO WebBlocker

Users

This feature allows you to create an individual user account, with a unique username and password, and restrict their web browsing by assigning them to a given Group.

Bypassing the SOHO WebBlocker

Occasionally, you may want to allow select individuals to bypass the filtering functions of SOHO WebBlocker. For example, if you are using the SOHO at your remote office as a telecommuter, you may want to block a particular category from your children while still retaining access for the adults in the household.

The SOHO WebBlocker configuration page includes a Full Access Password field. You can configure this password and give it to only those members of your trusted network who should be able bypass WebBlocker. When a site is blocked or unavailable, the user has the option of entering the full access password. With the password entered, the browser displays the otherwise blocked site. After the password is entered, the user can browse any site on the Internet until either the Password Expiration duration passes or the individual closes the browser.

Purchasing and enabling SOHO WebBlocker

To use WatchGuard SOHO WebBlocker, you must first purchase and enable the WebBlocker upgrade certificate. For information on redeeming upgrade certificates, please see, “Redeeming your SOHO upgrade certificates” on page 58.

User Guide 5.0

87

Image 87

WatchGuard Technologies SOHO manual Purchasing and enabling Soho WebBlocker, Bypassing the Soho WebBlocker

Contents

WatchGuard Soho User Guide Page Following conventions are used throughout this guide Using this guide Industry Canada Certifications and NoticesFCC Certification CE Notice Taiwanese Notice Vcci Notice Class a ITE Declaration of Conformity WatchGuard End-User License Agreement Page User Guide WatchGuard Limited Hardware Warranty User Guide Copyright and Patent Information Table of Contents Your Administrative Options Configuring Virtual Private Networking Page Welcome Introduction How does a firewall work? Registration and Identification Information How does a firewall work? Port number How does information travel on the internet?IP Addresses Protocol Services How does the Soho process this information?Network Address Translation NAT Soho Home Page-System Status Default Factory Settings Firewall Settings Resetting a Soho to the Factory Defaults Base Model Soho Rebooting a WatchGuard Soho Rebooting a WatchGuard Soho Rebooting a WatchGuard Soho Before you begin Pre-installation checklist Installation Process Macintosh Determine your current TCP/IP settingsMicrosoft Windows NT or Microsoft Windows 95 or 98 or ME Exit the TCP/IP configuration screen Disable your browser’s Http proxy Netscape 6/6.1 Netscape Physically connecting your Soho Internet Explorer 5.0/5.5Cabling the Soho for one to four devices Installation Process Cabling the Soho for more than four computers This creates a connection between the Soho and the modem Installation Process Network addressing Configuring Your External Network Double-click the Network icon TCP/IP Properties dialog box appears Configuring the Soho External network for dynamic addressing On your computer Configuring the Soho External network for static addressing External On the Soho Configuring the Soho external network for PPPoE From the Configuration Mode drop list, select PPPoE Client Click Automatically restore lost connections Release and renew the IP configuration Configuring Your Trusted Network Configure the Trusted network with static addressesRoutes Configure additional computers to the trusted network Configuring Static Routes View the Network Statistics Network Statistics View the Network Statistics System Security Your Administrative Options Setting a System Administrator Name and System Passphrase = System Security = VPN Manager Access Setting up VPN Manager Access Click the Submit button Update Your Configuration from a Non- Windows Platform Redeeming your Soho upgrade certificates= Update = Upgrade Seat Licenses Upgrade certificates = View Configuration File View the Configuration File View the Configuration File Configuring Incoming and Outgoing Services Firewall settings Incoming or Outgoing Pre-configured Services Creating a Custom Service Custom Service TCP and UDP PortsIP Protocols Blocking External Sites Blocked Sites Firewall Options Firewall Options Ping requests received on the External Network Socks implementation for the Soho Denying FTP access to the Trusted Network interface Configure your Socks application Disabling Socks on the Soho Logging all allowed outbound traffic DMZ Creating a virtual DMZ Creating a virtual DMZ Creating a virtual DMZ Viewing Soho log messages What is Logging? Wsep Logging Setting a WatchGuard Security Event Processor log host Our example Syslog Logging Setting a Syslog Host System Time Setting the System Time If you have decided to use the WatchGuard Time Server Setting the System Time Setting the System Time How WebBlocker works WatchGuard Soho WebBlocker WebBlocker Users and Groups Web site not in WebBlocker databaseWeb site in WebBlocker database WatchGuard WebBlocker database unavailable Bypassing the Soho WebBlocker Purchasing and enabling Soho WebBlocker Configuring the Soho WebBlocker Enable WebBlockerSettings Enter the Inactivity Timeout in minutes Groups Create WebBlocker Groups and Users To the right of the Users field, click the New button Click the Submit button Alcohol/Tobacco WebBlocker categories Drug Culture Search Engines Click Check if the URL is on the CyberNOT List Searching for blocked sites Why create a virtual private network? Configuring Virtual Private Networking What you will need IP Address Table example Special considerations Step-by-step instructions for configuring a Soho VPN tunnelObtaining the VPN upgrade Enabling the VPN upgrade Frequently asked questions Why do I need a static external address?How do I get a static external IP address? How do I troubleshoot the connection? OK, why is ping not working?How do I obtain a VPN upgrade certificate? How do I connect three or four offices together? How do I enable a VPN Tunnel? Muvpn ClientsView the VPN Statistics View the VPN Statistics 104 Troubleshooting How do I reboot my SOHO?General How do I register my SOHO? What do the on and Mode lights signify on the SOHO? How does the seat limitation on the Soho work? Set a password on my unit, but I forgot it. Can you help?What is a Soho feature key? Cant get a certain Soho feature to work with a DSL modem How do I install a Soho using a Macintosh? How do I change to a Dhcp trusted IP address? ConfigurationWhere are the Soho settings stored? How can I see the MAC address of my SOHO? How do I change to a static trusted IP address? How do I set up and disable Webblocker? Incoming WebBlocker VPN Management How do I set up VPN between two SOHOs? How do I set up my Soho for VPN Manager Access? Online Documenting and In-Depth FAQs Contacting Technical supportSpecial Notices Database WebBlocker Default gateway 98 DNS service 116 User Guide 117 Socks