Thread Info
  • State Suggested Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 7 replies
  • Answers 1 answer
  • Subscribers 29 subscribers
  • Views 2072 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Frage UTM

Andreas Langohr

Hallo Zusammen,

ich habe mal eine Frage

ist es möglich die utm zw ein netzwerk zuhängen als real time Virenscanner

(internet verkehr )

ohne etwas am router oder an den cleints zu ändern siehe Bild

 

Vielen Dank im Voraus

 

 

 

 



This thread was automatically locked due to age.
Parents
  • 0

    I am operating in bridge mode, and very happy with the results.  If I want to block some traffic completely, I do it in my firewall, rather than with UTM DNAT-to-Nowhere rules.

    Special things to know:

    • AD SSO does not work for Transparent Mode web filtering in bridge mode.
    • Transparent Mode should use "Full Transparent", as Bob indicated.   The checkbox for Full Transparent is not enabled until bridge mode is enabled.
    • Transparent Mode Filter Profiles also serve as Standard Mode profiles.  If you are using both modes, as I recommend, then the Standard Mode profiles must be positioned first in the priority order.

    How I use web filtering:

    • Standard Mode with Authentication=AD-SSO handles browser traffic, including ftp protocol in a browser.
    • Transparent Mode with Authentication=None handles any traffic that bypasses Standard Mode, including PCs that did not get the GPO, non-browser applications that use http or https, and operating system overhead that uses http/https.   Authentication None prevents a lot of useful traffic from being blocked.

    More details are available in my post "Web Filtering Lessons Learned", which is pinned to the top of the Web Filtering sub-topic.   

Reply
  • 0

    I am operating in bridge mode, and very happy with the results.  If I want to block some traffic completely, I do it in my firewall, rather than with UTM DNAT-to-Nowhere rules.

    Special things to know:

    • AD SSO does not work for Transparent Mode web filtering in bridge mode.
    • Transparent Mode should use "Full Transparent", as Bob indicated.   The checkbox for Full Transparent is not enabled until bridge mode is enabled.
    • Transparent Mode Filter Profiles also serve as Standard Mode profiles.  If you are using both modes, as I recommend, then the Standard Mode profiles must be positioned first in the priority order.

    How I use web filtering:

    • Standard Mode with Authentication=AD-SSO handles browser traffic, including ftp protocol in a browser.
    • Transparent Mode with Authentication=None handles any traffic that bypasses Standard Mode, including PCs that did not get the GPO, non-browser applications that use http or https, and operating system overhead that uses http/https.   Authentication None prevents a lot of useful traffic from being blocked.

    More details are available in my post "Web Filtering Lessons Learned", which is pinned to the top of the Web Filtering sub-topic.   

Children