Quickstart guide to Configuring WebTitan

Transcription

1 Quickstart guide to Configuring WebTitan

2 1. Install the License Once you have received the evaluation license by , you log on to WebTitan as follows using a browser as admin/hiadmin. Then navigate via the tabs to System Setup -> Licensing. Click Select License File to Import and browse to where you have saved the license and then click IMPORT. 2. URL database download Once the license has been validated, WebTitan will begin to download the URL database which contains a list of millions of URLs and their categorization. This is a one-time operation and will take about minutes depending on your Internet speed. The status of the database download can be checked on the 'System Overview' section of the Dashboard (The dashboard is available for selection in the top right of the UI). When completed, the version number of the database and date will appear. This is a static page, so refresh the page to check the database status. When the download is complete you can then proceed to configure your user's browsers to use WebTitan as their proxy

3 3. Configure your browser to use WebTitan Manual Proxy Configuration For Internet Explorer choose Tools->Internet Options->Connections->Lan Settings. For Google Chrome choose Settings->Show Advanced Settings->Network- >Change Proxy Settings, then proceed as for Internet Explorer For Firefox choose Tools->Options->Advanced->Network->Settings. Sample Setting for Internet Explorer

4 WPAD file Via System Setup -> Autoconfiguration, you can upload a WPAD file which details the WebTitan proxy settings to your browser. A sample WPAD.dat file is as follows: Start function FindProxyForURL(url, host){ if ( ) isinnet(host, " ", " ") isplainhostname(host) localhostordomainis(host, " ") dnsdomainis(host, ".company.local") return "DIRECT"; else if (isinnet(myipaddress(), " ", " ")) } return "PROXY <Webtitan Address>:8881"; End This indicates that if the url request is to the internal network /24 then the WebTitan proxy is bypassed. If the url request is to any other network and comes from the internal network, then the WebTitan proxy is used. You can then set the users browser to Auto-detect proxy settings for this network or enter URL of WebTitan>/wpad.dat into the Automated Proxy Configuration field of the browser options or preferences section. See also GPO (General Policy Option) If you are using a Windows Domain Controller you can enter the Internet Explorer Proxy Settings in the GPO tool and they will be pushed out to all users with that policy. On your domain controller, open your Group Policy Options by typing 'gpedit.msc' into 'Run'.

5 Navigate to 'User Configuration > Windows Settings > Internet Explorer Maintanance > Connection' and double click on 'Proxy Settings' now you need to tick 'enable proxy settings' and put the IP and port of WebTitan in the fields provided. We also recommend you tick the 'do not use proxy server for local addresses' box. Once these settings have been saved you can open a command line and type the command gpedit /force this will push the new proxy settings out quicker.

6 4. Some Configuration Tips 4.1 Policies By default all users will be assigned the default policy. To see the available policies in WebTitan, navigate via the tabs to Policies->Filtering Policies. You can add new policies or amend existing policies as required. Three policies are provided at installation, which are 'Default', 'Administrators' and 'Deny everything'. These can be seen below. 4.2 Users & Groups If you have an existing Active Directory or LDAP server, then you can import the users and groups from that server via User & Groups->Users. You can also create your own users and groups manually. A user is assigned one or more group(s) and a group can be assigned to one and only one policy. The browsing privileges of the user will be defined by the most permissive setting of the combined policies.

7 4.3 Authentication You can authenticate a user to use the proxy by: IP address LDAP IP address and LDAP NTLM (NT Lan Manager) - in this case once the user has authenticated via his Domain Controller he will be automatically authenticated to use the WebTitan proxy. IP address and NTLM This authentication is set up through the System Setup ->Authentication tab. 4.4 Limiting HTTP traffic to WebTitan To ensure that all HTTP traffic is being controlled by WebTitan, port 80 should be closed to all traffic with the exception of the WebTitan proxy.

8 5. The Dashboard When you log on first to WebTitan you will see the dashboard as below: This provides a snapshot of activity displaying the web sites that are being blocked by your polices, the ones users are accessing and the overall web traffic.

9 6. Trouble Shooting Via Support you can enable a Secure Remote Support Connection to WebTitan support. This requires 8822 tcp to be enabled outbound. You can also helpdesk@webtitan.com. If a user is trying to access a url which is blocked by a policy, they will see a WebTitan browser page explaining the reason for the error. This page can be customized via Settings->Interface Settings. A sample page is as follows.

10