12.4  Content Rating System (ISS OrangeWeb Filter)

The ISS OrangeWeb Filter module enables WinRoute to rate Web page content. Each page is sorted into predefined categories. Access to the page will be either permitted or denied according to this classification.

ISS OrangeWeb Filter uses a dynamic worldwide database which includes URLs and classification of Web pages. This database is maintained by special servers that perform page ratings. Whenever a user attempts to access a Web page, WinRoute sends a request on the page rating. According to the classification of the page the user will be either allowed or denied to access the page. To speed up URL rating the data that have been once acquired can be stored in the cache and kept for a certain period.

Note:

  1. A special license is associated with ISS OrangeWeb Filter. Unless WinRoute includes an ISS OrangeWeb Filter license, then the module behaves as a trial version only (this means that it is automatically disabled after 30 days from the WinRoute installation and options in the ISS OrangeWeb Filter tab will not be available). For detailed information about the licensing policy, read chapter 4  Product Registration and Licensing4  Product Registration and Licensing.

  2. The firewall's traffic rules must not block access to ISS OrangeWeb Filter's database servers. If, for any reason, access from the firewall to the Internet is restricted, it is necessary to allow access to the COFS service (6000/TCP).

  3. If the Internet connection is provided by a dial-up, it is not recommended to use ISS OrangeWeb Filter.

    Upon startup of the WinRoute Engine, access to the database server is checked (this process is called activation). This activation is refreshed regularly.

    If the line is hung up while the activation is being started and refreshed, the activation is not started and the ISS OrangeWeb Filter module will not work. In addition, communication with the database server significantly increases the response time for connection to such web pages classification of which is not saved in the local cache.

ISS OrangeWeb Filter configuration

The ISS OrangeWeb Filter module can be set and configured through the ISS OrangeWeb Filter tab in Configuration → Content Filtering → HTTP Policy.

ISS OrangeWeb Filter configuration

Figure 12.7. ISS OrangeWeb Filter configuration


Enable ISS OrangeWeb Filter

use this option to enable/disable the ISS OrangeWeb Filter module for classification of websites.

If ISS OrangeWeb Filter is disabled:

Categorize each page regardless of HTTP rules

If this option is enabled, ISS OrangeWeb Filter categorization will be applied to any web pages (i.e. to all HTTP requests processed by the HTTP protocol inspector).

Categorization of all pages is necessary for statistics of the categories of visited web pages (see chapter 21  Kerio StaR — statistics and reporting). If you do not intend to keep these statistics, it is recommended disable this option (categorization of all web pages might be demanding and it might decrease WinRoute performance).

Servers (Web sites) not to be rated by the module can eb specified in ISS OrangeWeb Filter white list. Use the Add button to open a dialog where a new item (server or a Web page) can be added.

Server

Use the Server item to specify Web sites not to be classified by the ISS OrangeWeb Filter. The following items can be specified:

  • server name (e.g. www.kerio.com). Server name represents any URL at a corresponding server.

  • a particular URL (e.g. www.kerio.com/index.html). It is not necessary to include protocol specification (http://) .

  • URL using wildcard matching (e.g. *.ker?o.*). An asterisk stands for any number of characters (even zero), a*.ker?o.* question-mark represents just one symbol.

Description

Comments for the items defined. For reference only.

ISS OrangeWeb Filter Deployment

To enable classification of Websites by the ISS OrangeWeb Filter module, this module must be running and all corresponding parameters must be set.

Whenever WinRoute processes a URL rule that requires classification of pages, the ISS OrangeWeb Filter plug-in is activated. The usage will be better understood through the following example that describes a rule denying all users to access pages containing job offers.

On the URL Rules tab in Configuration → Content Filtering → HTTP Rules, define a rule by using image 12.8  ISS OrangeWeb Filter rule as guidance:

ISS OrangeWeb Filter rule

Figure 12.8. ISS OrangeWeb Filter rule


The is rated by ISS OrangeWeb Filter rating system is considered the key parameter. The URL of each opened page will be rated by the ISS OrangeWeb Filter module. Access to each page matching with a rating category included in the database will be denied.

Use the Select Rating button to open a dialog where ISS OrangeWeb Filter rating categories can be chosen. Select the Job Search rating category (pages including job offers).

ISS OrangeWeb Filter categories

Figure 12.9. ISS OrangeWeb Filter categories


Note:

  1. You can define multiple URL rules that will use the ISS OrangeWeb Filter rating technology. Multiple categories may be used for each rule.

  2. We recommend you to unlock rules that use the ISS OrangeWeb Filter rating system (the Users can Unlock this rule option in the Advanced tab). This option will allow users to unlock pages blocked for incorrect classification. All unlock queries are logged into the Filter log — here you can monitor whether unlock queries were appropriate or not.