USG FLEX H Series User’s Guide
243
CHAPTER 16
Content Filtering
16.1 Overview
Use the content filter feature to control access to specific web sites or web content.
16.1.1 What You Can Do in this Chapter
• Use the Content Filtering screens (Section 16.2 on page 246) to set up web content filtering profiles.
• Use the Content Filtering Allow List screens (Section 16.3 on page 261) to create a common list of
good (allowed) web site addresses.
• Use the Content Filtering Block List screens (Section 16.4 on page 262) to create a common list of bad
(blocked) web site addresses.
• Use the Content Filtering Blocked URL keywords screens (Section 16.5 on page 264) to create a
common list of bad (blocked) URL keywords.
16.1.2 What You Need to Know
HTTP(S) Traffic Scan
The HTTP(S) Traffic Scan allows the Zyxel Device to block access to specific websites, by inspecting the
URL or Server Name Indication (SNI) that the user’s web browser sends to the web server.
HTTP(S) Traffic Scanning Process
1 The Zyxel Device Content Filter detects an HTTP(S) connection, and inspects the website sent.
2 If the website contains prohibited material, the HTTP(S) request is redirected to a block page.
Note: If the user’s web browser is using encryption, then you must enable SSL Inspection for
HTTP(S) Traffic Scan to work.
Content Filtering Policies
A content filter policy allows you to do the following.
• Use schedule objects to define when to apply a content filter profile.
• Use address and/or user/group objects to define to whose web access to apply the content filter
profile.
• Apply a content filter profile that you have custom-tailored.