ZyXEL Communications VPN Series - Page 627

Chapter 36 Content Filtering
ZyWALL/USG Series User’s Guide
627
The following table describes the labels in this screen.
Table 240 Configuration > UTM Profile > Content Filter > Profile
LABEL DESCRIPTION
General Settings
Enable Content Filter
Report Service
Select this check box to have the ZyWALL/USG collect category-based content
filtering statistics.
Report Server Click this link to choose where your ZyWALL/USG is registered: myZyXEL.com or
myZyXEL.com 2.0. Choose myZyXEL.com 2.0 for a model in this series.
Enable HTTPS Domain
Filter for HTTPS traffic
Select this check box to have the ZyWALL/USG block HTTPS web pages using the
CommTouch category service.
In an HTTPS connection, the ZyWALL/USG can extract the Server Name Indication
(SNI) from a client request, check if it matches a category in the CommTouch
content filter and then take appropriate action. The keyword match is for the
domain name only.
Drop connection when
HTTPS connection with
SSL V3 or previous
version
Select this check box to have the ZyWALL/USG block HTTPS web pages using SSL
V3 or a previous version.
Content Filter Category
Service Timeout
Specify the allowable time period in seconds for accessing the external web
filtering service’s server.
Denied Access Message Enter a message to be displayed when content filter blocks access to a web page.
Use up to 127 characters (0-9a-zA-Z;/?:@&=+$\.-_!~*'()%,”). For example,
“Access to this web page is not allowed. Please contact the network
administrator”.
It is also possible to leave this field blank if you have a URL specified in the
Redirect URL field. In this case if the content filter blocks access to a web page,
the ZyWALL/USG just opens the web page you specified without showing a denied
access message.
Redirect URL Enter the URL of the web page to which you want to send users when their web
access is blocked by content filter. The web page you specify here opens in a new
frame below the denied access message.
Use “http://” or “https://” followed by up to 262 characters (0-9a-zA-Z;/
?:@&=+$\.-_!~*'()%). For example, http://192.168.1.17/blocked access.
Profile Management
Add Click Add to create a new content filter rule.
Edit Click Edit to make changes to a content filter rule.
Remove Click Remove the delete a content filter rule.
Object Reference Select an entry and click Object References to open a screen that shows which
settings use the entry. Click Refresh to update information on this screen.
# This column lists the index numbers of the content filter profile.
Name This column lists the names of the content filter profile rule.
Description This column lists the description of the content filter profile rule.
Reference This displays the number of times an Object Reference is used in a rule.