Difference between revisions of "How To"

From Secure Web Gateway
Share/Save/Bookmark
Jump to: navigation, search
(Created page with " Page UNder Construction")
 
 
(411 intermediate revisions by 12 users not shown)
Line 1: Line 1:
  
Page UNder Construction
+
== Setup Your Secure Web Gateway With SafeSquid Appliance Builder ==
 +
 
 +
Using SafeSquid Appliance Builder (SAB) is the most recommended method for setting up your secure web gateway. SAB is a customized distro of Ubuntu Linux. It enables you to quickly setup your secure web gateway on a standard Intel server hardware, or as a virtual appliance on any virtualization platform like VmWare or Hyper-V.
 +
 
 +
SAB automatically installs and configures all dependency libraries, and services. Of course you can fine-tune it it later to meet any special needs.
 +
 
 +
Read more about [[How_To_Setup_Your_Secure_Web_Gateway_With_SafeSquid_Appliance_Builder|Setup Your Secure Web Gateway With SafeSquid Appliance Builder]]
 +
 
 +
== Setup Your Secure Web Gateway on your preferred Linux distribution ==
 +
 
 +
SafeSquid Appliance Builder (SAB) is an optimized version of Ubuntu Linux, optimized for easy setup of your secure web gateway. The SAB installs the Ubuntu Linux operating system, downloads and deploys the SafeSquid for Linux installation package, and the necessary dependencies. SafeSquid can also be installed on any other Linux operating system like Red-Hat, SuSe, CentOS, etc.
 +
 
 +
Read more about [[Setup_Your_Secure_Web_Gateway_on_your_preferred_Linux_distribution|Setup Your Secure Web Gateway on your preferred Linux]]
 +
 
 +
== Setup Your Secure Web Gateway on Windows Server ==
 +
 
 +
SafeSquid is designed for primarily Linux platform. However, if you would prefer to set up a secure web gateway for web filtering and content security on Windows, use '''SafeSquid for Windows'''.
 +
 
 +
SafeSquid for Windows is a native port of SafeSquid built for Linux, except for a couple of features. The windows installer for SafeSquid automatically downloads and deploys required dependencies. The installer enables you to easily setup SafeSquid as a native service on any Microsoft Server platform.
 +
 
 +
Read more about [[Setup_Your_Secure_Web_Gateway_With_SafeSquid_For_Windows_Platform|Setup Your Secure Web Gateway on Windows]]
 +
 
 +
== Upgrade SafeSquid To A Newer Version ==
 +
 
 +
Upgrade your SafeSquid to latest version.
 +
 
 +
Read more about [http://docs.safesquid.com/index.php/How_To_Upgrade_SafeSquid_To_A_Newer_Version Upgrade SafeSquid To A Newer Version]
 +
 
 +
== Access The SafeSquid User Interface ==
 +
 
 +
SafeSquid has an intrinsic Web GUI, that you enables you to manage your installation, setup required policies, and also monitor your secure web gateway.
 +
 
 +
Read more about [[Access_The_SafeSquid_User_Interface|Access The SafeSquid User Interface]]
 +
 
 +
== Profiled Internet Access ==
 +
 
 +
Your secure web gateway serves a variety of users, and applications. Appropriate restrictions ensure the web access boosts efficiency, while curbing non-productive activities. SafeSquid enables you to define policies as '''''access profiles''''', and ensure compliance. Create policies for users, based on their organizational hierarchy, and business role, to boost productivity.
 +
 
 +
Read more about [[Profiled_Internet_Access|Profiled Internet Access]]
 +
 
 +
== Setup HTTPS Inspection ==
 +
 
 +
HTTPS Inspection is the standard Security technology for encrypting a connection between the client and web server.Enable HTTPS inspection on SafeSquid SWG to inspect traffic that is encrypted by the Secure Sockets Layer (SSL) protocol. By that SafeSquid do deep content inspection of encrypted HTTPS traffic. Encrypted content is filtered easily.
 +
 
 +
Read more about [[Configure_HTTPS_Inspection| Setup HTTPS Inspection]]
 +
 
 +
== Enforce Safe Searches On Gateway  ==
 +
 
 +
World Wide Web provide extensive knowledge on almost every topic that you can think. Due to the vast information scattered around on the web we sometimes find the content that are irrelevant and inappropriate. We often come across adult/porn content accidentally while we are trying to find some information over internet. This may be faced by children or by someone who isn't supposed to watch pornographic content. Search engines help us big time in searching the appropriate content, but can sometimes mislead us. To avoid this Search engines has started providing with an additional feature Safe-Search.You can setup Safe Searches for different search engines like Google, Yahoo, Bing  by using SafeSquid.
 +
 
 +
Read more about [[How_to_enforce_SafeSearch|Enforce Safe Searches]] 
 +
 
 +
== YouTube Safety Mode On Gateway  ==
 +
 
 +
You Restricted mode helps you to screen out potentially objectionable content that you may prefer not to see or don't want others in your network to stumble across while enjoying YouTube. It will not allow the users to turn off the restricted mode.
 +
 
 +
Read more about [[How_to_enforce_YouTube_restricted_mode|YouTube Safety mode on Gateway]]
 +
 
 +
== Block Personal Gmail And Allow Google Corporate Accounts ==
 +
 
 +
Block Personal Gmail to ensure Data Security. No sharing of confidential data with personal accounts.You may want to prevent users from signing into Google services using any accounts other than the accounts you provided them with.Auto logout when detected that user is logged into personal Gmail. You can setup SafeSquid to block the access to consumer Google accounts.
 +
 
 +
Read more about [[Block_Personal_Gmail,_Allow_Google_Corporate_Accounts|Block Personal Gmail and  Allow Google Corporate Accounts]]
 +
 
 +
== Controlling Uploads To Prevent Data Leakage ==
 +
 
 +
DLP module is primarily used to restrict/prevent uploads of confidential and critical information from any organization. You can select predefined content type(s) in DLP section to prevent their upload(s). You can create multiple policies in DLP section such that all the selected content types will be blocked when any end user tries to upload it.
 +
 
 +
Read more about [[Controlling_Uploads_To_Prevent_Data_Leakage|Controlling Uploads To Prevent Data Leakage]]
 +
 
 +
== Enabling HTTPS Inspection causes remote applications to block automatically ==
 +
 
 +
(Block remote desktop applications, Download managers)
 +
 
 +
Read more about [[Block_remote_desktop_applications,_Download_managers|Block remote desktop applications, Download managers]] for all users
 +
 
 +
== Avoid Locking Yourself When You Are Configuring Policies In Access Restrictions ==
 +
 
 +
Read more about [[Avoid_Locking_Yourself_When_You_Are_Configuring_Policies_In_Access_Restrictions|Avoid Locking Yourself When You Are Configuring Policies In Access Restrictions]]
 +
 
 +
== Defend Against Malware And External Attacks ==
 +
 
 +
Read more about [[Defend_Against_Malware_And_External_Attacks|Defend Against Malware And External Attacks]]
 +
 
 +
== Defend Against Internal Threats And Data Leakage ==
 +
 
 +
Read more about [[Defend_Against_Internal_Threats_And_Data_Leakage|Defend Against Internal Threats And Data Leakage]]
 +
 
 +
== Allow Social Networking Sites during Lunch Hours ==
 +
 
 +
Allow the access to social networking sites in lunch hours for all users or for specific group of people
 +
 
 +
Read more about [[How_to_allow_social_networking_sites_in_lunch_hours|Allow Social Networking Sites during Lunch Hours]]
 +
 
 +
== Enable IP based authentication ==
 +
 
 +
Read more about [[Enable_IP_based_authentication|Enable IP based authentication]]
 +
 
 +
== Integrate AD or OpenLDAP  with SafeSquid ==
 +
 
 +
Network enterprises that have a large number of users, popularly manage user credentials via a centralized system. The centralized system ensures user identification across all the networked enterprise resources and services. Users too benefit immensely, as they need a singular credential to access anything across the network enterprise.You can organize all users into groups based on IP addresses, user names or security group memberships in Microsoft Active Directory. Every group gets its own filtering exceptions and blocking rules. Authenticate your domain users using Kerberos, NTLM or Basic LDAP.
 +
 
 +
Read more about [[How_to_integrate_AD_or_OpenLDAP_with_SafeSquid|Integrate AD or OpenLDAP  with SafeSquid]]
 +
 
 +
== Create User Groups based on network IP and LDAP (Active directory) ==
 +
 
 +
Setup your users into different User Groups. You can then set restriction policies for specifically these User Groups in the Access Profiles section.
 +
 
 +
Read more about [[Create_User_Groups|Create User Groups]]
 +
 
 +
== Integrate a Linux Host with a Windows AD for Kerberos SSO authentication ==
 +
 
 +
Kerberos Authentication support is particularly useful for Enterprise networks that have a Microsoft AD based Domain controller. By properly configuring the necessary Kerberos related factors, your enterprise Internet users can optionally enjoy Windows Integrated Authentication. Windows Integrated Authentication is a non-interactive authentication process, that uses SSO authentication. SSO ensures that your users do not have to manually provide their user credentials as username / password to access your networked enterprise resources and services, yet their access is restricted as specified. SSO, thus not only just adds convenience to the overall user experience, but also enhances security.
 +
 
 +
Read more about [[Integrate_a_Linux_Host_with_a_Windows_AD_for_Kerberos_SSO_authentication|Integrate a Linux Host with a Windows AD for Kerberos SSO authentication]]
 +
 
 +
== Adding Users using SafeSquid for Basic Authentication ==
 +
 
 +
If you don't have LDAP server to integrate with SafeSquid, but you want authenticate users by assigning usernames and passwords to your users.
 +
 
 +
Read more about [[Adding_users_using_SafeSquid_interface_for_authentication|Adding users using SafeSquid interface for authentication]]
 +
 
 +
== Create And Manage Your Private Categories ==
 +
 
 +
Manage your websites list by dividing them to specific categories. You can block or allow all websites by using custom categories. You can manage your categories form self-service portal also. Make all list by websites to allow or block in separate text files and upload them from SafeSquid User Interface.
 +
 
 +
Read more about [[Create_And_Manage_Your_Private_Categories|Create And Manage Your Private Categories]]
 +
 
 +
== Advantages Of Custom Web Categorization  ==
 +
 
 +
Read more about [[Advantages_Of_Custom_Web_Categorization|Advantages Of Custom Web Categorization ]]
 +
 
 +
== Manage Categories From Self Service Portal ==
 +
 
 +
Read more about [[Manage_Categories_From_Self_Service_Portal|Manage Categories From Self Service Portal]]
 +
 
 +
== Create Custom Templates ==
 +
 
 +
Create your own block template to show, when ever the any application or website is blocked by SafeSquid.
 +
 
 +
Read more about [[Create_Custom_Template|Create Custom Templates]]
 +
 
 +
== Caching Specific websites ==
 +
 
 +
Content Caching improves bandwidth efficiency. A page or file, when requested by a user, is served to the user and a copy of it is also maintained locally in the cache. So, when a request is made to fetch the same page or file, it is served with the local copy, instead of 'a fresh fetch'. SafeSquid has a very neat, efficient and manageable Content Caching system.
 +
 
 +
Read more about [[Caching_Specific_websites|Caching Specific websites]]
 +
 
 +
== Prefetch embedded images ==
 +
 
 +
Read more about [[Prefetch_embedded_images|Prefetch embedded images]]
 +
 
 +
== Block Virus Uploads And Downloads ==
 +
 
 +
Protect your network against viruses, Trojans, malware and other threats. You can block virus uploads and downloads by using SafeSquid. SafeSquid is providing different types of antivirus setups.      
 +
 
 +
Read more about [[How_to_block_virus_uploads_and_downloads|Block Virus Uploads And Downloads]]
 +
 
 +
== Block Advertisements And Banners ==
 +
 
 +
Security was the main reason cited for blocking of Advertisements. Advertisements can be annoying or intrusive. Blocking of advertisements can result in quicker loading and cleaner looking web pages with fewer distractions, lower resource waste (bandwidth, CPU, memory, etc.). You can setup SafeSquid to block all types of annoying advertisements and banners.
 +
 
 +
Read more about [[How_to_block_advertisements|Block Advertisements]]
 +
 
 +
== Block Anonymous Proxies ==
 +
 
 +
An anonymous proxy will allow your users to surf the web anonymously, since it tunnels your data through servers that are spread out across the globe and involve other IP addresses. Anonymous Proxy service enhances your security and lets your users access some restricted websites online. You can block these proxies by using SafeSquid, so that no user access the blocked websites
 +
 
 +
Read more about [[How_to_block_anonymous_proxies|Block Anonymous Proxies]]
 +
 
 +
== Block an Unclassified Web-site by Identifying The True Nature of Served Content With SafeSquid ==
 +
 
 +
Prevent the users to access the inappropriate content like pornography.
 +
 
 +
Read more about [[Block_an_Unclassified_Web_site_by_Identifying_The_True_Nature_of_Served_Content_With_SafeSquid|Block an Unclassified Web-site by Identifying The True Nature of Served Content With SafeSquid]]
 +
 
 +
== Block Third Party Cookies ==
 +
 
 +
You can block the cookies for third-party domains. Control tracking your activity across different sites and you can hide the referer for third-party domains. Now referer is same as hostname. You can also hide the user agents for third-party domains. Instead of original user agent SafeSquid use default user agent. (Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; Win 9x 4.90)).
 +
 
 +
Read more about [[How_to_block_third_party_cookies|Block Third Party Cookies]] 
 +
 
 +
== Block Particular User Login To Facebook Or Gmail ==
 +
 
 +
Restrict selective login user-names of logins from Facebook Or Gmail. You just enable default rule and modify your respective username with default ones. Now except selected users all can able to login into Facebook or Gmail.
 +
 
 +
Read more about [[How_to_block_particular_user_login_to_Facebook_or_Gmail|Block Particular User Login To Facebook or Gmail]]
 +
 
 +
== Do Bandwidth Management With Limits ==
 +
 
 +
Define the uploading and downloading limits to specific users or for all users. For example you want to restrict your users to download the file more than specified size.
 +
 
 +
Read more about [[Do_Bandwidth_Management_With_Limits|Do Bandwidth Management With Limits]]
 +
 
 +
== <span style="display: none">&nbsp;</span>Redirect One Website To Another Website ==
 +
 
 +
<span style="display: none">&nbsp;</span> Strictly redirect one URL to another. This is very useful if you want to redirect a certain page to a new location, change the URL structure of a site, remove the "www." portion of the URL, or even redirect users to another website entirely. A redirect automatically sends your website's visitors to a chosen destination. By this feature you can achieve Safe Searches for different search engines.
 +
 
 +
Read more about [[How_to_redirect_to_one_website_to_another_website|Redirect One Website To Another Website]]
 +
 
 +
== Integrate FTP Servers With SafeSquid ==
 +
 
 +
Integrate your&nbsp; FTP server with SafeSquid. And also you can setup the authentication for FTP sites. You can enable or disable the passive mode also for FTP server access.
 +
 
 +
Read more about [[How_to_configure_FTP_connections|Integrate FTP Servers With SafeSquid]]
 +
 
 +
== Transparent Redirection With SafeSquid And WCCP ==
 +
 
 +
Read more about&nbsp;[[Transparent_Redirection_With_SafeSquid_And_WCCP|Transparent Redirection With SafeSquid And WCCP]]
 +
 
 +
== Facebook Read Only Mode ==
 +
 
 +
Read more about [[Facebook_Read_Only_Mode|Facebook Read Only Mode]]
 +
 
 +
== Facebook specific page Allow ==
 +
 
 +
Read more about [[Facebook_specific_page_Allow|Facebook specific page Allow]]
 +
 
 +
== Discourage All users from Login,Post,Upload ==
 +
 
 +
Read more about [[Discourage_All_users_from_Login,Post,Upload|Discourage All users from Login,Post,Upload]]
 +
 
 +
== Bypass HTTPS Inspection Using Request Types ==
 +
 
 +
Read more about&nbsp;[[Bypass_HTTPS_Inspection_by_using_Request_Types|Bypass HTTPS Inspection Using Request Types]]
 +
 
 +
== Bypass Authentication&nbsp; ==
 +
 
 +
Read more about&nbsp; [[Bypass_SSO_Authentication|Bypass Authentication]]
 +
 
 +
== G-Suite App Sync Setup With SafeSquid ==
 +
 
 +
Read more about [[GSuite_App_Sync_Setup_With_SafeSquid|G Suite App Sync Setup With SafeSquid]]
 +
 
 +
== Use Statistics To View SafeSquid Stats ==
 +
 
 +
Read more about&nbsp;[[Use_Statistics_For_Debugging_The_Information|Use Statistics To View SafeSquid Stats]]
 +
 
 +
== Accessing business applications through SafeSquid ==
 +
 
 +
Read more about&nbsp;[[Accessing_business_applications_through_SafeSquid|Accessing business applications through SafeSquid]]
 +
 
 +
== Block specific&nbsp;website through SafeSquid ==
 +
 
 +
Read more about&nbsp;[[Block_specific_website_through_SafeSquid|Block specific&nbsp;website through SafeSquid]]
 +
 
 +
== Allow specific website through SafeSquid ==
 +
 
 +
Read more about&nbsp; [[Allow_specific_website_through_SafeSquid|Allow specific website through SafeSquid]]
 +
 
 +
== Allow Outlook To Work through SafeSquid ==
 +
 
 +
Read more about&nbsp;[[Allow_Outlook_To_Work_Through_SafeSquid|Allow Outlook To Work through SafeSquid]]
 +
 
 +
== Unblock the blocked website ==
 +
 
 +
Read more about&nbsp;[[Unblock_the_blocked_website|Unblock the blocked website]]
 +
 
 +
== Manage Disk Space On SafeSquid Server ==
 +
 
 +
This article will help you how to free up the disk space when any of the partitions on the SafeSquid server is full. If any of the partition is full you will get errors like disk space is full and SafeSquid server will not process any connection coming from the clients.
 +
 
 +
Read more about&nbsp;[[Manage_Disk_Space_On_SafeSquid_Server|Manage Disk Space On SafeSquid Server]]
 +
 
 +
== Bypassing blocked policies for whitelisted users ==
 +
 
 +
Read more about [[Bypassing_blocked_policies_for_whitelisted_users|Bypassing blocked policies for whitelisted users]]
 +
 
 +
== Block Emails or Files including archives or Social Posts using Keywords ==
 +
 
 +
Read more about [[Block_Emails_or_Files_including_archives_or_Social_Posts_using_Keywords|Block Emails or Files including archives or Social Posts using Keywords]]
 +
 
 +
== Allow remote applications to particular users ==
 +
 
 +
Read more about [[Allow_remote_applications_to_particular_users|Allow remote applications to particular users]]
 +
 
 +
== Viewing SafeSquid UI from outside your network ==
 +
 
 +
Read more about [[Viewing_SafeSquid_UI_from_outside_your_network|Viewing SafeSquid UI from outside your network]]
 +
 
 +
== Split the load between different ISPs ==
 +
 
 +
Read more about [[Split_the_load_between_different_ISPs|Split the load between different ISPs]]
 +
 
 +
== YouTube API Integration With SafeSquid To Allow Specific YouTube Videos ==
 +
 
 +
Read more about [https://docs.safesquid.com/wiki/Youtube_API_Integration_With_Safesquid_To_Allow_Specific_YouTube_Videos YouTube API Integration With SafeSquid To Allow Specific YouTube Videos]
 +
 
 +
== Allow Specific YouTube Channel and its Playlist ==
 +
 
 +
Read more about [[Allow_Specific_YouTube_Channel_and_its_Playlist|Allow Specific YouTube Channel and its Playlist]]
 +
 
 +
== Block Specific Youtube Channel ==
 +
 
 +
Read more about&nbsp; [[Block_Specific_Youtube_Channel|Block Specific Youtube Channel]]
 +
 
 +
== Access Mobile Applications Through SafeSquid ==
 +
 
 +
Read more about [[Access_Mobile_Applications_Through_SafeSquid|Access Mobile Applications Through SafeSquid]]
 +
 
 +
== Access Remote Desktop Applications Through SafeSquid ==
 +
 
 +
Read more about&nbsp;[[Access_Remote_Desktop_Applications_Through_SafeSquid|Access Remote Desktop Applications Through SafeSquid]]
 +
 
 +
== Allow Android Facebook Application ==
 +
 
 +
Read more about [[Allow_Android_Facebook_Application|Allow Android Facebook Application]]
 +
 
 +
== Block Android Google PlayStore Application ==
 +
 
 +
Read more about [[Block_Android_Google_PlayStore_Application|Block Android Google PlayStore Application]]
 +
 
 +
== Generate Performance Plot From SafeSquid User Interface ==
 +
 
 +
Read more about [[Generate_Performance_Plot_from_SafeSquid_User_Interaface|Generate Performance Plot from SafeSquid User Interaface]]
 +
 
 +
== Generation of Support tarball ==
 +
 
 +
Network related issue or&nbsp;issue regarding policy configuration can be rectified&nbsp;by generating support tarball.
 +
 
 +
Read more about&nbsp;[[Generation_of_Support_tarball|Generation of Support tarball]]
 +
 
 +
== Setup Cloud Restore ==
 +
 
 +
<span class="tL8wMe EMoHub" dir="ltr" id=":7q.co" style="text-align: left">SafeSquid Cloud restore feature is introduced as a disaster recovery plan(DRP).</span> <span class="tL8wMe EMoHub" dir="ltr" style="text-align: left">You can now recover your last configuration saved on cloud backup if any disaster occurs.</span>
 +
 
 +
Read more about [[Cloud_Restore|Cloud Restore]]
 +
 
 +
== Manage SafeSquid Instances From Self Service Portal ==
 +
 
 +
Read more about [[Manage_SafeSquid_instances_From_Self_Service_Portal|Manage SafeSquid instances From Self Service Portal]]
 +
 
 +
== Analyze The SafeSquid Logs ==
 +
 
 +
SafeSquid contains four different types of logs. Each log file has its own importance.
 +
 
 +
Read more about [[Analyze_The_SafeSquid_Logs|SafeSquid Logs]]
 +
 
 +
== Installation Of Web Security Client ==
 +
 
 +
Read more about [[Installation_Of_Web_Security_Client|Web Security Client installation]]
 +
 
 +
== Reporting (Dashboard) ==
 +
 
 +
Read more about [[Reporting_(Dashboard)|Reporting (Dashboard)]]
 +
 
 +
== Setup Reporting Module ==
 +
 
 +
Read more about [[Setup_Reporting_Module|Setup Reporting Module]]
 +
 
 +
== Mail Integration with Reporting Module ==
 +
 
 +
Read more about [[Mail_Integration_with_Reporting_Module|Mail Integration with Reporting Module]]
 +
 
 +
== Debug The Specific Issue ==
 +
 
 +
This page will help you with debug any problem faced during installation and post installation&nbsp;
 +
 
 +
Read more about&nbsp;[[Debug_The_Specific_Issue|Debug The Specific Issue]]
 +
 
 +
== Setup transparent proxy on SafeSquid ==
 +
 
 +
Setup the SafeSquid in transparent proxy mode, so that you can eliminate the client side configuration. Typically, the proxy server resides on the gateway and intercepts the requests from the clients. The client doesn't know that there is a proxy server which mediates their requests.
 +
 
 +
Read more about [[How_to_configure_transparent_proxy|SafeSquid transparent proxy]]
 +
 
 +
== How to configure reverse proxy ==
 +
 
 +
Read more about [[How_to_configure_reverse_proxy|Reverse proxy]]
 +
 
 +
== Deploy SafeSquid Behind Corporate Proxy ==
 +
 
 +
Use SafeSquid server in proxy chain mode. With simple configuration, you can forward requests to the upstream proxy from SafeSquid proxy server,
 +
 
 +
Read more about&nbsp;[[Deploy_SafeSquid_Behind_Corporate_Proxy|Deploy SafeSquid Behind Corporate Proxy]]
 +
 
 +
== Installation Of Web Security Client ==
 +
 
 +
Read more about [[Installation_Of_Web_Security_Client|Web Security Client installation]]
 +
 
 +
== Setup VPN with SafeSquid Web Security Client&nbsp; ==
 +
 
 +
Read more about&nbsp;[[Configure_VPN_setup_with_SafeSquid_Web_Security_Client|Configure VPN with SafeSquid Web Security Client]]
 +
 
 +
== Setup Captive Portal on SafeSquid and Secure WIFI Access Through Active Directory Infrastructure ==
 +
 
 +
Read more about&nbsp;[[Secure_WIFI_Access_Through_Active_Directory_Infrastructure_And_SafeSquid_Captive_Portal|Secure WIFI Access Through Active Directory Infrastructure And SafeSquid Captive Portal]]
 +
 
 +
{{Seo|keywords=install Secure Web Gateway, setup Secure Web Gateway, configure Secure Web Gateway, Secure Web Gateway sample rules|description=Step by step guide to install, setup and configure your Secure Web Gateway}}
 +
 
 +
[[Category:Navigator]]

Latest revision as of 14:23, 7 September 2019

Contents

Setup Your Secure Web Gateway With SafeSquid Appliance Builder

Using SafeSquid Appliance Builder (SAB) is the most recommended method for setting up your secure web gateway. SAB is a customized distro of Ubuntu Linux. It enables you to quickly setup your secure web gateway on a standard Intel server hardware, or as a virtual appliance on any virtualization platform like VmWare or Hyper-V.

SAB automatically installs and configures all dependency libraries, and services. Of course you can fine-tune it it later to meet any special needs.

Read more about Setup Your Secure Web Gateway With SafeSquid Appliance Builder

Setup Your Secure Web Gateway on your preferred Linux distribution

SafeSquid Appliance Builder (SAB) is an optimized version of Ubuntu Linux, optimized for easy setup of your secure web gateway. The SAB installs the Ubuntu Linux operating system, downloads and deploys the SafeSquid for Linux installation package, and the necessary dependencies. SafeSquid can also be installed on any other Linux operating system like Red-Hat, SuSe, CentOS, etc.

Read more about Setup Your Secure Web Gateway on your preferred Linux

Setup Your Secure Web Gateway on Windows Server

SafeSquid is designed for primarily Linux platform. However, if you would prefer to set up a secure web gateway for web filtering and content security on Windows, use SafeSquid for Windows.

SafeSquid for Windows is a native port of SafeSquid built for Linux, except for a couple of features. The windows installer for SafeSquid automatically downloads and deploys required dependencies. The installer enables you to easily setup SafeSquid as a native service on any Microsoft Server platform.

Read more about Setup Your Secure Web Gateway on Windows

Upgrade SafeSquid To A Newer Version

Upgrade your SafeSquid to latest version.

Read more about Upgrade SafeSquid To A Newer Version

Access The SafeSquid User Interface

SafeSquid has an intrinsic Web GUI, that you enables you to manage your installation, setup required policies, and also monitor your secure web gateway.

Read more about Access The SafeSquid User Interface

Profiled Internet Access

Your secure web gateway serves a variety of users, and applications. Appropriate restrictions ensure the web access boosts efficiency, while curbing non-productive activities. SafeSquid enables you to define policies as access profiles, and ensure compliance. Create policies for users, based on their organizational hierarchy, and business role, to boost productivity.

Read more about Profiled Internet Access

Setup HTTPS Inspection

HTTPS Inspection is the standard Security technology for encrypting a connection between the client and web server.Enable HTTPS inspection on SafeSquid SWG to inspect traffic that is encrypted by the Secure Sockets Layer (SSL) protocol. By that SafeSquid do deep content inspection of encrypted HTTPS traffic. Encrypted content is filtered easily.

Read more about  Setup HTTPS Inspection

Enforce Safe Searches On Gateway 

World Wide Web provide extensive knowledge on almost every topic that you can think. Due to the vast information scattered around on the web we sometimes find the content that are irrelevant and inappropriate. We often come across adult/porn content accidentally while we are trying to find some information over internet. This may be faced by children or by someone who isn't supposed to watch pornographic content. Search engines help us big time in searching the appropriate content, but can sometimes mislead us. To avoid this Search engines has started providing with an additional feature Safe-Search.You can setup Safe Searches for different search engines like Google, Yahoo, Bing  by using SafeSquid.

Read more about Enforce Safe Searches 

YouTube Safety Mode On Gateway 

You Restricted mode helps you to screen out potentially objectionable content that you may prefer not to see or don't want others in your network to stumble across while enjoying YouTube. It will not allow the users to turn off the restricted mode.

Read more about YouTube Safety mode on Gateway

Block Personal Gmail And Allow Google Corporate Accounts

Block Personal Gmail to ensure Data Security. No sharing of confidential data with personal accounts.You may want to prevent users from signing into Google services using any accounts other than the accounts you provided them with.Auto logout when detected that user is logged into personal Gmail. You can setup SafeSquid to block the access to consumer Google accounts.

Read more about Block Personal Gmail and  Allow Google Corporate Accounts

Controlling Uploads To Prevent Data Leakage

DLP module is primarily used to restrict/prevent uploads of confidential and critical information from any organization. You can select predefined content type(s) in DLP section to prevent their upload(s). You can create multiple policies in DLP section such that all the selected content types will be blocked when any end user tries to upload it.

Read more about Controlling Uploads To Prevent Data Leakage

Enabling HTTPS Inspection causes remote applications to block automatically

(Block remote desktop applications, Download managers)

Read more about Block remote desktop applications, Download managers for all users

Avoid Locking Yourself When You Are Configuring Policies In Access Restrictions

Read more about Avoid Locking Yourself When You Are Configuring Policies In Access Restrictions

Defend Against Malware And External Attacks

Read more about Defend Against Malware And External Attacks

Defend Against Internal Threats And Data Leakage

Read more about Defend Against Internal Threats And Data Leakage

Allow Social Networking Sites during Lunch Hours

Allow the access to social networking sites in lunch hours for all users or for specific group of people

Read more about Allow Social Networking Sites during Lunch Hours

Enable IP based authentication

Read more about Enable IP based authentication

Integrate AD or OpenLDAP  with SafeSquid

Network enterprises that have a large number of users, popularly manage user credentials via a centralized system. The centralized system ensures user identification across all the networked enterprise resources and services. Users too benefit immensely, as they need a singular credential to access anything across the network enterprise.You can organize all users into groups based on IP addresses, user names or security group memberships in Microsoft Active Directory. Every group gets its own filtering exceptions and blocking rules. Authenticate your domain users using Kerberos, NTLM or Basic LDAP.

Read more about Integrate AD or OpenLDAP  with SafeSquid

Create User Groups based on network IP and LDAP (Active directory)

Setup your users into different User Groups. You can then set restriction policies for specifically these User Groups in the Access Profiles section.

Read more about Create User Groups

Integrate a Linux Host with a Windows AD for Kerberos SSO authentication

Kerberos Authentication support is particularly useful for Enterprise networks that have a Microsoft AD based Domain controller. By properly configuring the necessary Kerberos related factors, your enterprise Internet users can optionally enjoy Windows Integrated Authentication. Windows Integrated Authentication is a non-interactive authentication process, that uses SSO authentication. SSO ensures that your users do not have to manually provide their user credentials as username / password to access your networked enterprise resources and services, yet their access is restricted as specified. SSO, thus not only just adds convenience to the overall user experience, but also enhances security.

Read more about Integrate a Linux Host with a Windows AD for Kerberos SSO authentication

Adding Users using SafeSquid for Basic Authentication

If you don't have LDAP server to integrate with SafeSquid, but you want authenticate users by assigning usernames and passwords to your users.

Read more about Adding users using SafeSquid interface for authentication

Create And Manage Your Private Categories

Manage your websites list by dividing them to specific categories. You can block or allow all websites by using custom categories. You can manage your categories form self-service portal also. Make all list by websites to allow or block in separate text files and upload them from SafeSquid User Interface.

Read more about Create And Manage Your Private Categories

Advantages Of Custom Web Categorization 

Read more about Advantages Of Custom Web Categorization 

Manage Categories From Self Service Portal

Read more about Manage Categories From Self Service Portal

Create Custom Templates

Create your own block template to show, when ever the any application or website is blocked by SafeSquid.

Read more about Create Custom Templates

Caching Specific websites

Content Caching improves bandwidth efficiency. A page or file, when requested by a user, is served to the user and a copy of it is also maintained locally in the cache. So, when a request is made to fetch the same page or file, it is served with the local copy, instead of 'a fresh fetch'. SafeSquid has a very neat, efficient and manageable Content Caching system.

Read more about Caching Specific websites

Prefetch embedded images

Read more about Prefetch embedded images

Block Virus Uploads And Downloads

Protect your network against viruses, Trojans, malware and other threats. You can block virus uploads and downloads by using SafeSquid. SafeSquid is providing different types of antivirus setups.      

Read more about Block Virus Uploads And Downloads

Block Advertisements And Banners

Security was the main reason cited for blocking of Advertisements. Advertisements can be annoying or intrusive. Blocking of advertisements can result in quicker loading and cleaner looking web pages with fewer distractions, lower resource waste (bandwidth, CPU, memory, etc.). You can setup SafeSquid to block all types of annoying advertisements and banners.

Read more about Block Advertisements

Block Anonymous Proxies

An anonymous proxy will allow your users to surf the web anonymously, since it tunnels your data through servers that are spread out across the globe and involve other IP addresses. Anonymous Proxy service enhances your security and lets your users access some restricted websites online. You can block these proxies by using SafeSquid, so that no user access the blocked websites

Read more about Block Anonymous Proxies

Block an Unclassified Web-site by Identifying The True Nature of Served Content With SafeSquid

Prevent the users to access the inappropriate content like pornography.

Read more about Block an Unclassified Web-site by Identifying The True Nature of Served Content With SafeSquid

Block Third Party Cookies

You can block the cookies for third-party domains. Control tracking your activity across different sites and you can hide the referer for third-party domains. Now referer is same as hostname. You can also hide the user agents for third-party domains. Instead of original user agent SafeSquid use default user agent. (Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; Win 9x 4.90)).

Read more about Block Third Party Cookies 

Block Particular User Login To Facebook Or Gmail

Restrict selective login user-names of logins from Facebook Or Gmail. You just enable default rule and modify your respective username with default ones. Now except selected users all can able to login into Facebook or Gmail.

Read more about Block Particular User Login To Facebook or Gmail

Do Bandwidth Management With Limits

Define the uploading and downloading limits to specific users or for all users. For example you want to restrict your users to download the file more than specified size.

Read more about Do Bandwidth Management With Limits

 Redirect One Website To Another Website

  Strictly redirect one URL to another. This is very useful if you want to redirect a certain page to a new location, change the URL structure of a site, remove the "www." portion of the URL, or even redirect users to another website entirely. A redirect automatically sends your website's visitors to a chosen destination. By this feature you can achieve Safe Searches for different search engines.

Read more about Redirect One Website To Another Website

Integrate FTP Servers With SafeSquid

Integrate your  FTP server with SafeSquid. And also you can setup the authentication for FTP sites. You can enable or disable the passive mode also for FTP server access.

Read more about Integrate FTP Servers With SafeSquid

Transparent Redirection With SafeSquid And WCCP

Read more about Transparent Redirection With SafeSquid And WCCP

Facebook Read Only Mode

Read more about Facebook Read Only Mode

Facebook specific page Allow

Read more about Facebook specific page Allow

Discourage All users from Login,Post,Upload

Read more about Discourage All users from Login,Post,Upload

Bypass HTTPS Inspection Using Request Types

Read more about Bypass HTTPS Inspection Using Request Types

Bypass Authentication 

Read more about  Bypass Authentication

G-Suite App Sync Setup With SafeSquid

Read more about G Suite App Sync Setup With SafeSquid

Use Statistics To View SafeSquid Stats

Read more about Use Statistics To View SafeSquid Stats

Accessing business applications through SafeSquid

Read more about Accessing business applications through SafeSquid

Block specific website through SafeSquid

Read more about Block specific website through SafeSquid

Allow specific website through SafeSquid

Read more about  Allow specific website through SafeSquid

Allow Outlook To Work through SafeSquid

Read more about Allow Outlook To Work through SafeSquid

Unblock the blocked website

Read more about Unblock the blocked website

Manage Disk Space On SafeSquid Server

This article will help you how to free up the disk space when any of the partitions on the SafeSquid server is full. If any of the partition is full you will get errors like disk space is full and SafeSquid server will not process any connection coming from the clients.

Read more about Manage Disk Space On SafeSquid Server

Bypassing blocked policies for whitelisted users

Read more about Bypassing blocked policies for whitelisted users

Block Emails or Files including archives or Social Posts using Keywords

Read more about Block Emails or Files including archives or Social Posts using Keywords

Allow remote applications to particular users

Read more about Allow remote applications to particular users

Viewing SafeSquid UI from outside your network

Read more about Viewing SafeSquid UI from outside your network

Split the load between different ISPs

Read more about Split the load between different ISPs

YouTube API Integration With SafeSquid To Allow Specific YouTube Videos

Read more about YouTube API Integration With SafeSquid To Allow Specific YouTube Videos

Allow Specific YouTube Channel and its Playlist

Read more about Allow Specific YouTube Channel and its Playlist

Block Specific Youtube Channel

Read more about  Block Specific Youtube Channel

Access Mobile Applications Through SafeSquid

Read more about Access Mobile Applications Through SafeSquid

Access Remote Desktop Applications Through SafeSquid

Read more about Access Remote Desktop Applications Through SafeSquid

Allow Android Facebook Application

Read more about Allow Android Facebook Application

Block Android Google PlayStore Application

Read more about Block Android Google PlayStore Application

Generate Performance Plot From SafeSquid User Interface

Read more about Generate Performance Plot from SafeSquid User Interaface

Generation of Support tarball

Network related issue or issue regarding policy configuration can be rectified by generating support tarball.

Read more about Generation of Support tarball

Setup Cloud Restore

SafeSquid Cloud restore feature is introduced as a disaster recovery plan(DRP). You can now recover your last configuration saved on cloud backup if any disaster occurs.

Read more about Cloud Restore

Manage SafeSquid Instances From Self Service Portal

Read more about Manage SafeSquid instances From Self Service Portal

Analyze The SafeSquid Logs

SafeSquid contains four different types of logs. Each log file has its own importance.

Read more about SafeSquid Logs

Installation Of Web Security Client

Read more about Web Security Client installation

Reporting (Dashboard)

Read more about Reporting (Dashboard)

Setup Reporting Module

Read more about Setup Reporting Module

Mail Integration with Reporting Module

Read more about Mail Integration with Reporting Module

Debug The Specific Issue

This page will help you with debug any problem faced during installation and post installation 

Read more about Debug The Specific Issue

Setup transparent proxy on SafeSquid

Setup the SafeSquid in transparent proxy mode, so that you can eliminate the client side configuration. Typically, the proxy server resides on the gateway and intercepts the requests from the clients. The client doesn't know that there is a proxy server which mediates their requests.

Read more about SafeSquid transparent proxy

How to configure reverse proxy

Read more about Reverse proxy

Deploy SafeSquid Behind Corporate Proxy

Use SafeSquid server in proxy chain mode. With simple configuration, you can forward requests to the upstream proxy from SafeSquid proxy server,

Read more about Deploy SafeSquid Behind Corporate Proxy

Installation Of Web Security Client

Read more about Web Security Client installation

Setup VPN with SafeSquid Web Security Client 

Read more about Configure VPN with SafeSquid Web Security Client

Setup Captive Portal on SafeSquid and Secure WIFI Access Through Active Directory Infrastructure

Read more about Secure WIFI Access Through Active Directory Infrastructure And SafeSquid Captive Portal