surfcontrol web filter for blue coatkb.websense.com/pf/12/webfiles/wbsn documentation/surf... ·...

™

SurfControl Web Filter for Blue Coat Installation Guide

Version 5.0

Notices

NOTICES

Copyright © 2005 SurfControl plc. All rights reserved.

No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or byany means, electronic, mechanical, photocopying, recording, or otherwise, without the prior permission of thecopyright owner.

This product includes software developed by the Apache Software Foundation (http://www.apache.org/).

This product contains work based on the wvWare program, which is licensed under the Free SoftwareFoundation General Public License.

This product incorporates code from GoAhead Software Inc., Copyright 2003 GoAhead Software, Inc. AllRights Reserved.

SurfControl is a registered trademark, and SurfControl and the SurfControl logo are trademarks ofSurfControl plc. All other trademarks are property of their respective owners.

COMMENTS ON THIS GUIDE?You can view updated documentation and support information at http://www.surfcontrol.com/support

Was this guide helpful? E-mail us at [email protected] to suggest changes or make acorrection.

Printed April 2007

SurfControl Web Filter for Blue Coat Installation Guide i

http://www.surfcontrol.com/support

Technical Support

TECHNICAL SUPPORT

• For the latest support information on SurfControl products, visit http://www.surfcontrol.com/support

• Read the Top Issues - This page has a quick list that covers the most common support issues with theSurfControl products. If your problem is here, you will have an immediate answer.

• Search our Knowledge Base - our new, constantly updated Knowledge Base contains articles, FAQs andglossary items to answer your questions about all SurfControl products.

• If your question or problem cannot be answered by the Top Issues or is not in the Knowledge Base, fillout an Online Support Request Form

• Telephone Support - If you would like to speak with a Technical Support Representative, our excellentSurfControl Technical Support is just a phone call away.

SURFCONTROL SALES

For product and pricing information, or to place an order, contact SurfControl. To find your nearestSurfControl office, please visit our website.

http://www.surfcontrol.com

ii Installation Guide SurfControl Web Filter for Blue Coat

http://www.surfcontrol.com/support


TABLE OF CONTENTS

Notices ..................................................................................................................................................................................................... iComments on this Guide? .................................................................................................................................................................... iTechnical Support ................................................................................................................................................................................. iiSurfControl Sales .................................................................................................................................................................................. ii

INTRODUCTION

SurfControl Web Filter for Blue Coat ............................................................................................................................................... 2System Requirements ........................................................................................................................................................................... 3

INTEGRATION

Introduction ........................................................................................................................................................................................... 6Network Architecture ........................................................................................................................................................................... 7Filtering Process .................................................................................................................................................................................... 7Pre-installation Requirements ............................................................................................................................................................. 8

Evaluation or Purchase of SurfControl Web Filter Monitor and Reporter ................................................................. 8Purchase of SurfControl Web Filter Monitor and Reporter........................................................................................... 8

Setup and Configuration ...................................................................................................................................................................... 9Setting up the SurfControl Web Filter Monitor and Reporter ....................................................................................... 9Configuring the Blue Coat ProxySG Appliance .............................................................................................................10Creating Filtering Policies...................................................................................................................................................17

INSTALLATION DECISIONS

Introduction .........................................................................................................................................................................................20Installation considerations..................................................................................................................................................20User name resolution ..........................................................................................................................................................20Database options .................................................................................................................................................................20Other considerations...........................................................................................................................................................20

Installation considerations .................................................................................................................................................................21Install Virtual Control Agent .............................................................................................................................................21SurfControl Web Filter Report Central............................................................................................................................22

Database Considerations ...................................................................................................................................................................22MSDE Database ..................................................................................................................................................................22SQL Server............................................................................................................................................................................23Reasons to install SQL Server onto a dedicated server .................................................................................................24Database Authentication ....................................................................................................................................................25

Other Considerations .........................................................................................................................................................................26Content..................................................................................................................................................................................26E-mail notifications .............................................................................................................................................................26Remote Administration ......................................................................................................................................................27Privacy Edition considerations ..........................................................................................................................................27

SurfControl Web Filter for Blue Coat Installation Guide iii

INSTALLATION ORDER

Introduction .........................................................................................................................................................................................30Installation procedures .......................................................................................................................................................................30

Changes to the server..........................................................................................................................................................30Managing Database Memory .............................................................................................................................................41

Remote Access to Report Central ....................................................................................................................................................43System requirements for remote access ...........................................................................................................................43

iv Installation Guide SurfControl Web Filter for Blue Coat

Chapter 1 Introduction

SurfControl Web Filter for Blue Coat page 2System Requirements page 3

INTRODUCTIONSurfControl Web Filter for Blue Coat1

SURFCONTROL WEB FILTER FOR BLUE COAT

SurfControl Web Filter integrates SurfControl filtering and reporting capabilities into Blue Coat ProxySGappliances to filter Internet requests. The Blue Coat Proxy SGTM family of appliances (ProxySG 400 Series,800 Series and 8000 Series) delivers a scalable proxy solution for centralized or distributed enterpriseenvironments. SurfControl Web Filter for Blue Coat provides organizations with the ability to manage policyat a granular level and provides full monitoring and reporting capabilities.

There are two main components to this release:

• Embedded Internet Threat Database.

• SurfControl Web Filter Monitor and Reporter.

The Blue Coat ProxySG appliance, using the SurfControl Internet Threat Database, enables you to:

• Customize filtering down to the user or group level.

• Employ the industry's largest Internet Threat Database - classified by website into easy-to-managecategories.

• Manage Web access by time of day.

• Use continuous, integrated and adaptive threat analysis and research by SurfControl Adaptive ThreatIntelligence Service.

The SurfControl Web Filter Monitor and Reporter enables you to Auto-Schedule reports and databaseupdates.

2 Installation Guide SurfControl Web Filter for Blue Coat

INTRODUCTIONSystem Requirements 1

SYSTEM REQUIREMENTS

Table 1-1 gives the minimum and recommended specifications for installing SurfControl Web Filter andSurfControl Report Central: Table 1-1 System Requirements

Component Minimum Recommended

Processor Intel Pentium III Intel Pentium IV

Memory 512 MBytes RAM 1 GByte RAM

Supported OperatingSystems (with latestService Packs)

Windows 2000 Server

Windows 2000 Advanced Server

Windows Server 2003 Standard Edition

Windows Server 2003 Enterprise Edition

Network One Network Interface Card (NIC).

Databases (with latestService Packs)

One of the following:

MSDE 2000

MS SQL Server 7

MS SQL Server 2000

Note: SurfControl recommends that you installMSDE or SQL Server before installing Web Filter.

FTP server Microsoft IIS

Note: It is essential that an FTP server is installedon the SurfControl Monitor and Reporter to enableflat files to be received.

Disk Space 1 GByte free 5 GBytes free

Web browser Microsoft Internet Explorer 5.0

Microsoft Internet Explorer 6.0

Applications Adobe Acrobat Reader 6 for viewing reports in pdf format.

SurfControl Web Filter for Blue Coat Installation Guide 3

INTRODUCTIONSystem Requirements1


Chapter 2 Integration

Introduction page 6Network Architecture page 7Filtering Process page 7Pre-installation Requirements page 8Setup and Configuration page 9

INTEGRATIONIntroduction2

INTRODUCTION

This chapter provides details of how the SurfControl Web Filter Monitor and Reporter integrates with theBlue Coat ProxySG (v4.1.3 or later) secure proxy appliance. SurfControl Web Filter Monitor and Reporter usespass-through filtering technology, which integrates with the Internet filtering capabilities of the Blue CoatProxySG appliance.

Using SurfControl’s industry-leading Internet Threat Database, you can create policies through the Blue CoatVirtual Policy Manager. With SurfControl Web Filter Monitor and Reporter, you also gain SurfControl’s robustmonitoring and reporting capabilities.

This chapter details the following:

• Network architecture

• The filtering process

• Pre-installation requirements

• Setting up SurfControl Web Filter Monitor and Reporter and configuring the Blue Coat ProxySGappliance.


INTEGRATIONNetwork Architecture 2

NETWORK ARCHITECTURE

The Blue Coat ProxySG appliance provides Internet filtering within your network. Files are transferred by FTPfrom this appliance to a specific folder on the SurfControl Web Filter Monitor and Reporter, which providesmonitoring and reporting functions. The SurfControl Web Filter Monitor and Reporter includes the softwarefor SurfControl Web Filter for Microsoft Windows.

Figure 2-1 shows how SurfControl Web Filter Monitor and Reporter integrates with a Blue Coat ProxySGappliance.

Figure 2-1 Network architecture

FILTERING PROCESS

The Blue Coat ProxySG appliance uses the SurfControl Internet Threat Database to filter Internet traffic. Thisdata is written to a SurfControl-formatted log file, which is moved to the SurfControl Web Filter Monitor &Reporter.

The filtering, monitoring, and reporting process is:

1 A client issues an HTTP request.

2 The browser configuration directs the request to the Blue Coat ProxySG appliance.

3 Blue Coat filters the request using the SurfControl Internet Threat Database.

4 Blue Coat writes the data associated with the transaction into a SurfControl-formatted log file (“flat file”).

5 Once the active log file reaches the maximum size, Blue Coat creates a new log file.

The maximum size of this log file is configured by the administrator during log file configuration on theBlue Coat appliance.


INTEGRATIONPre-installation Requirements2

6 Using FTP, the preconfigured Blue Coat “FTP Client” moves the file to the specified location on theSurfControl Web Filter Monitor & Reporter.

7 The SurfControl Scheduler imports the data to the SurfControl database that resides on the specified SQLserver. By default, this database is SurfControl_WebFilter.

8 The data is available for monitoring and reporting by the SurfControl Web Filter Monitor and Reporter.

PRE-INSTALLATION REQUIREMENTS

Before installing SurfControl Web Filter Monitor and Reporter, perform the following steps:

1 Download the SurfControl Web Filter Monitor and Reporter from www.surfcontrol.com.

A user name and password will be sent to you by e-mail to enable the Blue Coat appliance to use theSurfControl Internet Threat Database. See the sections “Evaluation or Purchase of SurfControl WebFilter Monitor and Reporter” and “Purchase of SurfControl Web Filter Monitor and Reporter” foradditional information.

2 Make sure an FTP server, such as Microsoft IIS, is installed on the SurfControl Web Filter Monitor &Reporter.

3 Make sure a Microsoft SQL server (MSDE or SQL2000) is available for the SurfControl database.

EVALUATION OR PURCHASE OF SURFCONTROL WEB FILTER MONITOR AND REPORTERIf you have downloaded an evaluation copy of the software, you will receive an e-mail that contains your username and password; this is required to enable the SurfControl Internet Threat Database on the Blue Coatappliance.

No user name or password is required to enable the evaluation of SurfControl monitoring and reporting.

PURCHASE OF SURFCONTROL WEB FILTER MONITOR AND REPORTERIf you have bought SurfControl Web Filter Monitor and Reporter, you will receive an e-mail that contains auser name and password.



INTEGRATIONSetup and Configuration 2

SETUP AND CONFIGURATION

This section outlines the basic set up for configuring the SurfControl Web Filter Monitor and Reporter system.Before creating filtering policies, you need to:

• Set up the SurfControl Web Filter Monitor & Reporter.

• Configure the Blue Coat Proxy SG appliance.

SETTING UP THE SURFCONTROL WEB FILTER MONITOR AND REPORTEROn the SurfControl Web Filter Monitor and Reporter:

1 Install MSDE or Microsoft SQL server.

2 Install the SurfControl Web Filter Monitor and Reporter. See “Installation considerations” on page 21.‘

3 Stop the SurfControl Web Filter service through Administrative Tools > Services in the Control Panel.

4 Create a directory on the SurfControl Web Filter Reporter and Monitor that will be used to receive the logfile (flat file) from the Blue Coat appliance.

You must also specify the same directory when configuring the client on the Blue Coat appliance foruploading the log files. See Figure 2-6.

5 Configure either the default FTP site or a virtual directory.

– Make sure that the default path is the same as the path that you have created to receive the flat file.

– Make sure you configure accounts that can access the FTP server.

6 Using the Scheduler, create a Database Update event to import the log data (flat files) into the SurfControldatabase.

You should configure manual database updates so that the database can be updated regularly (for example,every hour). For details of database updates, see the SurfControl Web Filter for Blue Coat Administrator’s Guide.

7 Using the Scheduler, create events for database maintenance (purge, archive, and compact).

8 Using SurfControl Report Central, create Report events to meet your company’s requirements. For details,see the SurfControl Report Central Administrators Guide.

Note: You must stop the SurfControl Web Filter service before using the SurfControl Monitor and Reporter with the Blue Coat appliance.

Note: The Rules Administrator and Real-Time Monitor are not supported in this release.


INTEGRATIONSetup and Configuration2

CONFIGURING THE BLUE COAT PROXYSG APPLIANCETo configure the Blue Coat ProxySG appliance:

1 From the Management Console, select Configuration > Content Filtering > General.

2 Select SurfControl as your content filtering provider (Figure 2-2).

Figure 2-2 Select your content filter

3 Select Configuration > Content Filtering > SurfControl.



4 Set up SurfControl categories using your user name and password (Figure 2-3). For additionalinformation, see the Blue Coat ProxySG Configuration and Management Guide.

Figure 2-3 The SurfControl user name, password and download URL

5 Select Configuration > Content Filtering > SurfControl > Automatic Download.



6 Schedule updates to the Internet Threat Database (Figure 2-4). For additional information, see the BlueCoat ProxySG Configuration and Management Guide.

Figure 2-4 Schedule automatic updates to the Internet Threat Database

7 Select Configuration > Access Logging > Logs > Logs.

8 Click New.

9 Create a new log file to use the SurfControl format (Figure 2-5). SurfControl recommends the following:

– Maximum size of each remote file = 50 MB

– Early upload value = 100 MB.



If you set the early upload value to 0, Blue Coat will only upload the files using the defined UploadSchedule.

Figure 2-5 Create a SurfControl log file

10 Select Configuration > Access Logging > Logs > Upload Client.

11 Configure the client for uploading log files by FTP to the SurfControl Web Filter Monitor and Reporter(Figure 2-6). For additional information, see the Blue Coat ProxySG Configuration and Management Guide.

Set the following:

– Save the log file as text file.

– Set the Client type as FTP Client, and then click Settings.

12 In the FTP server connection dialog box:

– Enter the Host IP address of the SurfControl server.

– Enter the path (/)

– Enter the user name required by the FTP server.



– Set the transfer type to text file.

– Enter the Filename format of the log: %m-%d-%H-%M-%S_SGT_%f_%l.tmp.

Figure 2-6 Configure the upload client

If the Blue Coat appliance has three Network Interface Cards (NICs), SurfControl recommends that youset up a dedicated FTP connection between Blue Coat and SurfControl. To do this, set up the SurfControlserver on its own network, and then connect the third Blue Coat NIC to this network. This configurationremoves delays on the Blue Coat server that is caused by the amount of data being transferred to theSurfControl server.

13 Select Configuration > Access Logging > Logs > Upload Schedule.



14 Set the Upload type: to periodically, and then set up the upload schedule (Figure 2-7). For additionalinformation, see the Blue Coat ProxySG Configuration and Management Guide.

Figure 2-7 Configure the upload schedule

15 Select Configuration > Access Logging > General > Default Logging.



16 Log all HTTP/HTTPS traffic to the SurfControl log file (Figure 2-8).

Figure 2-8 Log HTTP/HTTPS traffic



CREATING FILTERING POLICIESTo create filtering policies, you launch the Blue Coat Visual Policy Manager. For details of how to use thescreen, please see the relevant Blue Coat documentation.

1 Select Configuration > Policy > Visual Policy Manager.

Figure 2-9 Launch Visual Policy Manager

2 Click Launch.

3 Create your filtering policies as required (Figure 2-10).

Figure 2-10 Visual Policy Manager


Chapter 3 Installation decisions

Introduction page 20Installation considerations page 21Database Considerations page 22Other Considerations page 26

INSTALLATION DECISIONSIntroduction3

INTRODUCTION

This section discusses the decisions you must make before installing SurfControl Web Filter and is divided intothe following sections:

INSTALLATION CONSIDERATIONS• You need to consider where you want to install the Virtual Control Agent (VCA).

• You need to consider where you want to install SurfControl Report Central.

See “Installation considerations” on page 21 for more details.

USER NAME RESOLUTIONThe resolution of user names is handled by Blue Coat. There is no need to install any SurfControl user nameresolution method as part of the SurfControl Web Filter Monitor and Reporter.

DATABASE OPTIONS• What database do you plan to use (MSDE or SQL)?

• How do you want Web Filter to connect to the database (Windows authentication or SQL authentication)?

See “Database Considerations” on page 22 for more details.

OTHER CONSIDERATIONS• Content information

• Which e-mail notifications should Web Filter send?

• What administrative privileges do you need to set up?

Warning: Without SurfControl Report Central you will not be able to run reports.


INSTALLATION DECISIONSInstallation considerations 3

INSTALLATION CONSIDERATIONS

During installation, you can set the following options for SurfControl Web Filter’s basic behavior:

• Install Virtual Control Agent (VCA).

• Install SurfControl Mobile Filter Administrator. You must have the Mobile Filter server installed on yournetwork for the Administrator to work properly – not applicable for this release.

• Install SurfControl Report Central.

INSTALL VIRTUAL CONTROL AGENTThe Virtual Control Agent (VCA) uses the latest neural network techniques to intelligently classify unknown or‘None’ Web sites into one of 54 categories. The VCA categorizes English, German, French, Spanish andDutch content focusing on non-business areas such as "adult," "gambling" and "sports." The VCA is targetedto identify non-business sites that affect productivity in the workplace.

SurfControl recommends installing VCA onto a single Web Filter computer within a multi installationenvironment, where the traffic volume is low.

Before installation, make sure the server where VCA is installed meets the minimum requirements for VCA inTable 3-1:

During installation, you can choose to install and register VCA or install it for a 30-day evaluation period.

Note: VCA categorizations will not be used in any filtering policy; they are for reporting only.

Table 3-1 Minimum Requirements for VCA



Memory 256 Mbytes RAM 1 Gbyte Ram

Supported Operating Systems (with latest Service Packs)

Windows 2000 Server

Windows 2000 Advanced Server



Disk space 1 Gbyte free

Note: The service side of the VCA only functions for a registered version of the VCA. See Chapter 6 of the Administrator’s Guide for more details on the VCA service.


INSTALLATION DECISIONSDatabase Considerations3

SURFCONTROL WEB FILTER REPORT CENTRALTo be able to produce reports on your company’s Internet activity you need to install SurfControl ReportCentral. If you decide not to install Report Central as part of the Web Filter installation, you can do so laterfrom the executable (setup.exe) in the following folder depending whether you have a product CD, or a Website download:

• Product CD: webstd\English\Reporting Filter

• Web site download: English\Reporting

DATABASE CONSIDERATIONS

Web Filter is supplied with Microsoft SQL Server 2000 Desktop Engine (MSDE 2000), but can also create thedata structure in a fully-licensed version of SQL 2000. If you plan to use a fully-licensed version of SQL, makesure the software is installed and running before attempting to install Web Filter.

Using a fully-licensed version of SQL (rather than MSDE) allows more flexibility and the ability to fine-tunedatabase performance. Web Filter performs extremely well in either case.

Web Filter connects to the database using a fully-qualified connection string. This string contains all the detailsrequired to connect to a database including database type, name of the server, user id, password, and databasename. Using a connection string does not require the creation of DSNs. Therefore, any Web Filter client orserver on the network can access the database without creating a link through the ODBC.

MSDE DATABASEIf you are not using a SQL Server database, you need to install MSDE. SurfControl recommends you installMSDE before installing Web Filter.

MSDE allows a seamless upgrade to a SQL database in the future. You can access MSDE data tables using theWindows OSQL utility from the command prompt. For more details about the OSQL utility, visitwww.microsoft.com.

Note: Because SurfControl Report Central can contain confidential information on its database, you should install it in a secure environment.

Warning: There are limitations to the maximum size of any database. Please read the relevant database documentation for details.


http://www.microsoft.com

INSTALLATION DECISIONSDatabase Considerations 3

If you install MSDE onto the Web Filter Monitor & Reporter, make sure the server meets the minimumresources listed in Table 3-2:

SQL SERVERIf you have a Microsoft SQL Server on your network, you should plan to create the database on that server(you can create and configure the database during the installation process).

If you plan to use SQL Server, but have not installed it, complete the following tasks before installing WebFilter:

1 Install the SQL Server Client Connectivity Pack onto the server where you install Web Filter.

2 Install SQL Server on the designated server; this can be the same machine as the Web Filter Monitor &Reporter.

3 Make sure your server has the minimum resources listed in Table 3-3:

Table 3-2 MSDE minimum requirements on Web Filter Monitor & Reporter

# Users Computer Specification

<500 Intel Pentium IV, 2 GBytes RAM, 1.2 GHz processor, 10 GBytes hard drive.

500 - 1000 Intel Pentium IV, 3 GBytes RAM, 1.4 GHz processor, 20 GBytes hard drive.

>1000 SurfControl recommends a dedicated SQL Server installation.

Note: These resources are in addition to the curently stated requirements.

Note: SurfControl recommends installing SQL Server on a dedicated server.

Warning: Install SQL Server with the default settings of case insensitivity, including Dictionary Order. Choosing case sensitivity may cause problems when installing Web Filter.

Table 3-3 SQL Server minimum requirements on Web Filter Monitor & Reporter


<500 Intel Pentium IV, 2 GBytes RAM, 1.2 GHz processor, 10 GBytes hard drive.


(Sheet 1 of 2)


INSTALLATION DECISIONSDatabase Considerations3

4 Configure SQL Server to limit memory and processors when running both Web Filter and SQL Server onthe same computer..

REASONS TO INSTALL SQL SERVER ONTO A DEDICATED SERVERWeb Filter supports SQL 7.0 and SQL 2000. Use a fully-licensed version of SQL Server on a dedicated serverif your company:

• Plans to store large amounts of data (i.e. you have a large number of users, high Internet activity, or need toretain data for an extended period of time).

• Requires Web Filter to write data to a database that is not resident on the Web Filter Monitor & Reporter.

• Requires more than one Web Filter Monitor & Reporter (collector) to consolidate data in a single database.

• Plans to store Web Filter, SurfControl IM Filter, and SurfControl E-mail Filter data on the same SQLinstallation.


>5000 Intel Pentium IV, 7 GBytes RAM, 1.8 GHz processor, 60 GBytes hard drive.

Note: The owner of the database should be the same for all the connecting servers.

Table 3-3 SQL Server minimum requirements on Web Filter Monitor & Reporter


(Sheet 2 of 2)


INSTALLATION DECISIONSDatabase Considerations 3

Considerations for large environmentsMake sure your dedicated SQL server has the minimum resources listed in Table 3-4:

DATABASE AUTHENTICATIONWeb Filter supports both Windows authentication and SQL authentication.

SurfControl recommends Windows authentication due to ease of use. With SQL authentication if a passwordis changed, any configured connections would have to be re-established. With Windows authentication theywould still work. This is also in line with Microsoft’s security recommendations.

Windows authenticationIf you choose to use Windows authentication, make sure domain rights are correctly configured between theWeb Filter Monitor & Reporter and the SQL server. The Web Filter installer account requires SQL Serverdatabase creator rights.

SQL authenticationIf you choose to use SQL authentication, you will need to create a SQL Server login specifically for Web Filter.This login is required for creating the database and should be used for all Web Filter database activities.

If you choose to connect to the SQL database using SQL authentication, make sure the SQL server isconfigured to support SQL Server and Windows NT authentication.

Table 3-4 SQL server minimum requirements for large environments


<500 Intel Pentium IV, 1 GByte RAM, 1.2 GHz processor, 10 GBytes hard drive

500 - 1000 Intel Pentium IV, 2 GBytes RAM, 1.4 GHz processor, 20 GBytes hard drive

1000 - 5000 Intel Pentium IV, 4 GByte RAM, 1.4 GHz processor, 40 GBytes hard drive

>5000 Intel Pentium IV, 6 GByte RAM, 1.8 GHz processor, 60 GBytes hard drive


INSTALLATION DECISIONSOther Considerations3

OTHER CONSIDERATIONS

This section contains general information that you should be aware of when installing SurfControl Web Filter.

CONTENTThe SurfControl Internet Threat Database is the premier category database in the filtering industry andprovides the most accurate, current, and relevant content listing available. The Internet Threat Databaseincludes:

• Well-organized categories.

• Millions of Web sites and billions of Web pages.

• International content, which enables you to select from many different languages and countries.

• Daily updates (thousands of new sites each week).

E-MAIL NOTIFICATIONS

Web Filter can automatically notify the system administrator when any of the following events occur:

• Scheduled task failures - if a scheduled task fails to run.

• Internet Threat Database license reminders - if the Internet Threat Database license is close toexpiring. This is an optional notification.

• Internet Threat Database update not performed - if no update has been performed for a week (sevendays) a reminder will be sent.

• Unregistered product reminders - if you have not registered the product. This is a default reminder andwill be sent if you choose to enable the feature (by identifying a mail server and recipient).

If you decide to enable this feature, you will need to know the IP address of your mail server and will need toidentify an administrator who will receive the notifications.

If you choose not to enable this feature, then Web Filter will not send notifications for any of the events listedabove.

Note: This feature is only relevant to the SurfControl Web Filter Monitor and Reporter.

Note: Not applicable for this release. This should not be selected.

Note: Not applicable for this release. This should not be selected.


INSTALLATION DECISIONSOther Considerations 3

REMOTE ADMINISTRATIONSystem administrators can remotely administer Web Filter by installing the Remote Administration Client.From the client installation you can:

• View monitored traffic.

• Run reports.

• Start and stop the Scheduler Service.

• Set up scheduled events.

Before installation, make sure the administrator computer meets the minimum requirements listed in Table 3-5:

PRIVACY EDITION CONSIDERATIONSYou can only upgrade from the previous Privacy edition (4.2.0.6) to version 5.0. You cannot upgrade from anystandard version of Web Filter to the Privacy edition.

For details on the Privacy Edition features, see the SurfControl Web Filter for Blue Coat Administrator’s Guide.

Table 3-5 Remote Administration Client minimum requirements

Minimum Recommended


Memory 256 MBytes RAM 512 MBytes RAM

Supported Operating Systems (with latest Service Packs)

Windows 2000 Professional or Server

Windows Advanced Server

Windows XP



Network Ethernet card

Disk Space 5 GBytes free

Web browser MS Internet Explorer 5.0 MS Internet Explorer 6.0


INSTALLATION DECISIONSOther Considerations3


Chapter 4 Installation order

Introduction page 30Installation procedures page 30Remote Access to Report Central page 43

INSTALLATION ORDERIntroduction4

INTRODUCTION

This chapter details the SurfControl recommendations for the installation order of the SurfControl Web FilterMonitor and Reporter.

INSTALLATION PROCEDURES

This section contains details of the installation procedures and wizards.

You can cancel the installation of Web Filter at any time by clicking Cancel. You will have to re-start theinstallation process if you decide to install again at a later date.

CHANGES TO THE SERVERInstalling Web Filter makes the following changes to your server:

• Places an icon in the system tray at startup .

From this icon, you can start, stop and configure the Web Filter service, and the Scheduler service. Youcan also serialize the product.

If the Web Filter Service has been stopped the icon is grayed out .

In a Web Filter Administration client installation the gray icon is placed in the system tray, to indicate thatthe service is not running locally.

• Adds Web Filter executables to the Start menu (Programs > SurfControl Web Filter).

• Adds necessary registry entries.

• Creates the SurfControl_WebFilter database.

• Adds the following services:

– Web Filter service

– Scheduler service

– Remote Administration service

– Audit Logger service

– Virtual Control Agent service ( if selected during installation)

Note: The Web Filter service should be stopped for this release.


INSTALLATION ORDERInstallation procedures 4

Procedure 4-1: Insta l l ing MSDE (opt ional )Step Action

1 If you plan to use an MSDE database, SurfControl recommends installing MSDE prior to performingthe Web Filter installation. You can download our recommended version of MSDE atwww.surfcontrol.com from the Downloads > Free Trial of SurfControl > Web Filter menu. You willneed to register first to access this download.

2 Locate the downloaded file (setup.exe).

3 Double-click setup.exe to start the installation process.

4 If you are using SQL authentication and have chosen to set a Systems Administrator (SA) password, enter the password when prompted.

5 You will need to restart the server before installing SurfControl Web Filter.

P rocedure 4-2 : Insta l l ing SurfContro l Web F i l terStep Action

1 Locate the downloaded SurfControl Web Filter executable file (setup.exe).


3 The InstallShield Wizard loads.

4 Click Next to continue.

Sur fContro l Web F i l te r Setup sc reen

5 Welcome to SurfControl Web Filter.


Important Insta l la t ion Informat ion screen

7 Prior to starting the installation, you should have determined the appropriate network configuration for Web Filter.


(Sheet 1 of 7)



INSTALLATION ORDERInstallation procedures4

L i cense Agreement screen

9 Read the License Agreement.

10 Do you agree to the terms?

• Yes, select I accept...Click Next to continue.

• No, select I disagree...Click Cancel to exit the installation process.

Se lect Database Insta l la t ion Opt ions

11 If you did not install MSDE prior to Web Filter, you can now choose your database options. You can either:

• Install the complete product which will also install MSDE 2000.

• Install the complete product using an existing SQL Server database.

• Install the Remote Administration version of Web Filter.

Note: If you choose to install the complete product with MSDE, you will need to re-boot your computer as part of this process.


Setup Type

13 Select SurfControl Web Filter.

Note: SurfControl Mobile Filter is not applicable for this release.

You have the option to install the Privacy Edition version of Web Filter that meets legislation in some European countries that forbids user browsing details to be viewed without express management and union permission. Select this option if you wish to use this version of Web Filter. For more details of the Privacy Edition, see the SurfControl Web Filter for Blue Coat Administrator’s Guide.

14 Click Next to Continue.

Procedure 4-2 : Insta l l ing SurfContro l Web F i l ter (Cont inued)Step Action

(Sheet 2 of 7)



Customer Informat ion sc reen

15 Enter a name in the User Name field.

16 Enter your company’s name in the Company Name field.

17 Enter the serial number for Web Filter.

Enter the serial number for VCA.

Note: For the limitations of the VCA in this release see the SurfControl Web Filter for Blue Coat Administrator’s Guide.

If evaluating, leave these blank. You have 30 days to evaluate the product.


Choose Dest inat ion Locat ion sc reen

19 Select the folder where setup will install files. The default is:

C:\Program Files\SurfControl\Web Filter.

Choose another location by selecting Browse and navigating to a different location.


Setup Type screen

21 Select Complete Product.


Se lect Server Ins ta l la t ion Opt ions screen

23 Select the check boxes to install the relevant options.

Note: The options Enable User Name Support and Mobile Filter are not applicable for this release.

If you select SurfControl Report Central, the installation will start automatically after Web Filter has installed.

24 Click Next.

25 The Select Internal Traffic Subnets screen appears.


(Sheet 3 of 7)



Se lect Interna l T raf f i c Subnets sc reen

26 Click Next.

Note: Internal subnets are not applicable for this release.

Star t Copy ing F i les sc reen

27 Review your settings before starting the installation.

28 Click Next.

Setup Status screen

29 Web Filter Setup is performing the requested operations.

Notes on Database Connect ions

30 Step 32 will not appear if MSDE has been installed with this version of Web Filter.

31 Step 35 will only appear if there are current Web Filter databases installed on the server.

Se lect MSDE/SQL Server sc reen

32 From the drop-down list, choose the server where the SQL database is running. You can also enter the name of a server here.

33 Select the Authentication method.

Note: SurfControl recommends using Windows authentication.

Note: If you choose Windows authentication, both the Web Filter Monitor & Reporter and the SQL server must be members of the same domain.

34 Click Next.


(Sheet 4 of 7)



Se lect MSDE/SQL Server Database sc reen

35 Choose the database you want to create.

Note: In most cases, you should use the default database (SurfControl_WebFilter); you can enter a new name, if necessary.

36 Click Next.

37 Did you choose Windows Authentication to connect to a remote SQL Server database?

If Yes go to step 38.

If No go to step 40.

Se lect Account for Web F i l te r Serv ice

38 Choose the domain account you want Web Filter to use when connecting to the remote SQL Server database when using Windows Authentication.


System Adminis t rator Not i f i cat ions sc reen

40 Enter the E-mail Server name or IP address.

41 Enter the Recipient Address.

42 Enter the From Address (using the default address supplied is suitable).

43 Choose the types of notification you want to receive.


Note: You can change these settings following installation from the Web Filter Service Settings. See the Web Filter Service chapter of the Administrator’s Guide for more details.

Sur fContro l Report Centra l ins ta l la t ion

45 The installation of Report Central will now start.

P rocedure 4-2 : Insta l l ing SurfContro l Web F i l ter (Cont inued)Step Action

(Sheet 5 of 7)



Create Reports Admin is t rator User

46 You need to set up an initial Report Administrator level user for Report Central. This user can then add other users and configure Report Central to suit your organization.

Enter a User name and a Password, which you need to confirm.


Se lect MSDE/SQL Server sc reen

48 From the drop-down list, choose the server where the SQL database is running. You can also enter the name of a server here.

49 Select the Authentication method.

Note: SurfControl recommends using Windows authentication.

Note: If you choose Windows authentication, both the Web Filter Monitor & Reporter and the SQL server must be members of the same domain.


Se lect MSDE/SQL Server Database sc reen

51 Choose the database you want to connect to.

Note: The default database is SurfControl_WebFilter.


Report Centra l Database update

53 For Report Central to give accurate results, its database needs to be updated before reports are run. You need to perform this from the Configuration > Database Connections > Update Tasks tab from Report Central.


55 Did you choose Windows Authentication to connect to a SQL Server database?

If Yes go to Step 56.

If No go to Step 58.


(Sheet 6 of 7)



Se lect Account for Sur fContro l Report Cent ra l Se rv ice

56 Choose the domain account you want Report Central to use when connecting to the remote SQL Server database when using Windows Authentication.


Setup Status

58 Report Central is performing the requested operations.

Note: When you log on to Report Central for the first time, you will be prompted to download the appropriate Java Runtime Environment, if it is not already installed on your computer.

Ins ta l l Sh ie ld Wizard Complete

59 The installation of Web Filter is complete.

60 Click Finish.

Informat ion

61 You are now asked to complete your registration details for Internet Threat Database updates.

Click OK to continue.

Sur fContro l P roduct Reg is t rat ion Screen

62 Complete the fields in the form.

63 Click Register.

Sur fContro l Scheduler

64 You will see a dialog box informing you that a scheduled event has been created for your Internet Threat Database updates.


(Sheet 7 of 7)



Procedure 4-3 : Insta l l ing the Web F i l ter Admin ist rat ion c l ientStep Action

1 Locate the downloaded SurfControl Web Filter file (setup.exe).


3 The InstallShield Wizard loads.

Sur fContro l Web F i l te r Setup sc reen

4 Welcome to SurfControl Web Filter.


Important Informat ion sc reen


L i cense Agreement screen

7 Read the License Agreement.

8 Do you agree to the terms?

• Yes, select I accept...Click Next to continue.

• No, select I disagree...Click Cancel to exit the installation process.

Se lect Database Insta l la t ion Opt ions

9 Select Web Filter Remote Administration.

(Sheet 1 of 4)



Setup Type

10 Select SurfControl Web Filter.

Note: SurfControl Mobile Filter is not applicable for this release.

You have the option to install the Privacy Edition version of Web Filter that meets legislation in some European countries that forbids user browsing details to be viewed without express management and union permission. Select this option if you wish to use this version of Web Filter. For more details of the Privacy Edition, see the SurfControl Web Filter for Blue Coat Administrator’s Guide.


Customer Informat ion sc reen

12 Enter a name into the User Name field.

13 Enter your company’s name into the Company Name Field.

14 Enter the serial number for Web Filter.

Enter the serial number for VCA.

Note: For the limitations of the VCA in this release see the SurfControl Web Filter for Blue Coat Administrator’s Guide.

If evaluating, leave these blank. You have 30 days to evaluate the product.


Choose Dest inat ion Locat ion sc reen

16 Select the folder where Setup will install files. The default is:

C:\Program Files\SurfControl\Web Filter.

Choose another location by selecting Browse and navigating to a different location.


Procedure 4-3 : Insta l l ing the Web F i l ter Admin ist rat ion c l ient Step Action

(Sheet 2 of 4)



Setup Type screen

18 Select Remote Administration.


Se lect C l ient Ins ta l la t ion Opt ions sc reen

20 Select the check boxes to install the relevant options.

Note: Mobile Filter is not applicable for this release.

If you select SurfControl Report Central, the installation will start automatically after Web Filter has installed.


Se lect Server P lat form Type screen

22 Select Windows 2000/2003 (Pass by) or Microsoft Proxy Server.

Note: Microsoft ISA Server is not applicable for this release.


Star t Copy ing F i les sc reen

24 Review your settings before starting the installation.


Setup Status screen

26 Web Filter is performing the requested operations.

Procedure 4-3 : Insta l l ing the Web F i l ter Admin ist rat ion c l ient Step Action

(Sheet 3 of 4)



MANAGING DATABASE MEMORYWhen generating reports, SQL Server can run out of memory if the SQL Server tempDB transaction log doesnot have enough memory allocated to it. To allocate more memory, follow Procedure 4-5:

Ins ta l l Sh ie ld Wizard Complete sc reen

27 Click Finish.

28 You have successfully installed SurfControl Web Filter Administration client.

Procedure 4-4 : Ser ia l i z ing SurfContro l Web F i l te rStep Action

1 From the status area of the task bar, right-click the Web Filter icon and select About.

2 Click Serialize.

3 Enter your serial number.

4 Click OK to continue.

5 You have successfully serialized SurfControl Web Filter.

P rocedure 4-5 : A l locat ing more memory to tempDB Log F i leStep Action

1 Launch SQL Server Enterprise Manager.

2 Select tempDB from the database list.

P rocedure 4-3 : Insta l l ing the Web F i l ter Admin ist rat ion c l ient Step Action

(Sheet 4 of 4)



3 Right-click on tempDB and select Properties from the shortcut menu. The tempDB properties dialog box will display.

4 Select the Transaction Log tab.

5 Under Space Allocated (MB) enter a value of 15 or above.

6 Click OK to close the dialog box.

Procedure 4-5 : A l locat ing more memory to tempDB Log F i leStep Action


INSTALLATION ORDERRemote Access to Report Central 4

REMOTE ACCESS TO REPORT CENTRAL

Users who do not have SurfControl Report Central installed can generate reports via remote access, withoutinstalling any software on their computers. You can give users remote access to Report Central by distributingthe hyperlink as shown in Procedure 4-6.

SYSTEM REQUIREMENTS FOR REMOTE ACCESSIf a user wants to access Report Central remotely, their computer must meet the following systemrequirements.

To distribute the remote access shortcut, follow Procedure 4-6:

You will need to re-send the remote access shortcut if you edit any of the following settings on the computerwhere Report Central is installed:

• IP address of host computer.• Tomcat Web Server Port Number.

Table 4-1 System Requirements for Remote Access


SupportedWeb browsers

Internet Explorer 5.0 Internet Explorer 6.0

Applications Adobe Reader 6.0 or later to read reports in PDF format.

Procedure 4-6: Dis t r ibut ing the remote access shortcutStep Action

1 From the Start menu, navigate to Programs > SurfControl Report Central.

2 Right-click on Web Filter 5.0 Reports or Web Filter 5.0 Reports - Secure Connection (if you want to useReport Central via HTTPS) and select Send To from the menu.

3 Select Mail Recipient.

4 Your e-mail program (e.g. Microsoft Outlook) will open a new message. The body of the message willcontain a link to Report Central.

5 Enter the e-mail addresses of the users you want to receive the link, and send the e-mail.

6 To use Report Central, users must have the Java Runtime Environment installed on their computer. Ifthey do not have this component, they will be prompted to install it the first time they try to log on toReport Central. They should accept any requests to download and install files, and choose the Typicalinstall option when asked.

7 Although you can send the remote access shortcut to many users at once, it is better to send it to oneuser at a time, along with their user name and password. See the Report Central Administrator’sGuide for more details.


INSTALLATION ORDERRemote Access to Report Central4


surfcontrol web filter for blue coatkb.websense.com/pf/12/webfiles/wbsn documentation/surf... ·...

Documents