User manual BARRACUDA WEB FILTERING SERVICE ADMINISTRATOR GUIDE

[. . . ] Barracuda Web Filtering Service Administrator's Guide Barracuda Networks Inc. Winchester Blvd Campbell, CA 95008 http://www. barracuda. com Copyright Notice Copyright 2010, Barracuda Networks www. barracuda. com v3. x All rights reserved. Information in this document is subject to change without notice. Trademarks Barracuda Web Filtering Service is a trademark of Barracuda Networks. All other brand and product names mentioned in this document are registered trademarks or trademarks of their respective holders. 2 Barracuda Web Filtering Service Administrator's Guide Contents Chapter 1 ­ Introduction . [. . . ] You might choose this option for an organization where everyone has the same Web-use needs. Example: · An organization may set standard rules for Web use and security for every employee, regardless of department or role. Group- or User-based Web Rules In addition to global rules and reports, you can create rules and reports that apply to different groups of people or even individual users. You will need to install a Barracuda Adapter on your network to associate user information with Web traffic. Examples: · · An organization might allow the legal department to see anything, but limit production workers to specific sites that they need for their jobs. Another organization might set a global policy to block access to all pornography and entertainment sites; set a group policy to allow the marketing department to access social networking sites; and set a user-based policy to allow the CEO to access everything. Blocking or Allowing Access Rules can include any combination of the following components, which control what the rule denies or allows: · Whitelist--rules with a whitelist component allow access to specific sites. They can apply to all users, groups of users, or specific IP addresses. Whitelist rules are the first rules Barracuda Web Filtering Service Manager checks when a user request occurs, so a site on a whitelist rule will be available even if another rule is created to deny it. Blacklist--rules with a blacklist component deny access to specific sites. They can apply to all users, groups of users, or specific IP addresses. You can optionally send an alert email when the rule is triggered, and you can choose to log the attempt. Restriction--rules can also include a component that lets you restrict access based on the types of content, applications, and security risks, as opposed to specific sites. SafeSearch--rules with the Safe Search feature enable the search engine to apply its existing filters. See Using SafeSearch In a Rule on page 95. · · · 94 Barracuda Web Filtering Service Administrator's Guide Using SafeSearch In a Rule The Safe Search option is available in the Rules>Image/Multimedia Safe Search>Compliance area. The SafeSearch option is available for the following search engines: · · · · · Bing Dogpile Google MSN Yahoo This Safe Search option is available when the administrator creates or edits a rule, and is enforced for the selected engine(s) used by anyone in the set of Groups or IP Addresses specified in the "Applies To" area. Search engines apply various search filters, usually associated with Web sites that contain adult content or other inappropriate content as defined by that search engine. When Safe Search filtering is selected in the user's Web browser, then the search engine applies its filters and displays filtered search results to the user. However, Safe Search filters in a search engine can be deselected by the user in the Web browser. The Safe Search feature in the Barracuda Web Filtering Service can translate URLs so that the search engine can enforce its Safe Search filters regardless of the filter preference set by the user in the Web browser. For example, if the Safe Search preference for Google in a user's Web browser is deselected, but the administrator enables Safe Search in the Barracuda Web Filtering Service for Google, then the Service translates the URLs so that Google can enforce its Safe Search filters regardless of the Safe Search preference set in the user's Web browser. If the administrator enables Safe Search for a search engine and also creates a rule to block URLs in a specified Category, then: · · The search engine applies its Safe Search filters and displays filtered search results to the user. If the user clicks a URL in the search results that resolves to a blocked Category in the Barracuda Web Filtering Service, then the user sees the blocking page that you have designated for that Category. For example, if the administrator creates a rule in the Barracuda Web Filtering Service to block URLs for the category Games, and also enables Safe Search for Google, then the user's search for "Games" returns results that are filtered by Google. If that user then clicks on a URL that resolves to the category Games in the Barracuda Web Filtering Service, then the user sees the blocking page that you have designated for that Category. Reports for the SafeSearch feature will be available in a future release. Order of Execution Within Rules Because rules can include different types of restrictions, it's important to understand the order in which Web requests are compared to restrictions within rules. [. . . ] If You institute patent litigation against any entity (including a cross-claim or counterclaim in a lawsuit) alleging that the Work or a Contribution incorporated within the Work constitutes direct or contributory patent infringement, then any patent licenses granted to You under this License for that Work shall terminate as of the date such litigation is filed. You may reproduce and distribute copies of the Work or Derivative Works thereof in any medium, with or without modifications, and in Source or Object form, provided that You meet the following conditions: (a) You must give any other recipients of the Work or Derivative Works a copy of this License; and (b) You must cause any modified files to carry prominent notices stating that You changed the files; and (c) You must retain, in the Source form of any Derivative Works that You distribute, all copyright, patent, trademark, and attribution notices from the Source form of the Work, excluding those notices that do not pertain to any part of the Derivative Works; and (d) If the Work includes a "NOTICE" text file as part of its distribution, then any Derivative Works that You distribute must include a readable copy of the attribution notices contained within such NOTICE file, excluding those notices that do not pertain to any part of the Derivative Works, in at least one of the following places: within a NOTICE text file distributed as part of the Derivative Works; within the Source form or documentation, if provided along with the Derivative Works; or, within a display generated by the Derivative Works, if and wherever such third-party notices normally appear. The contents of the NOTICE file are for informational purposes only and do not modify the License. You may add Your own attribution notices within Derivative Works that You distribute, alongside or as an addendum to the NOTICE text from the Work, provided that such additional attribution notices cannot be construed as modifying the License. [. . . ]