How To

1 Setup Your Secure Web Gateway With SafeSquid Appliance Builder
2 Setup Your Secure Web Gateway on your preferred Linux distribution
3 Setup Your Secure Web Gateway on Windows Server
4 Upgrade SafeSquid To A Newer Version
5 Access The SafeSquid User Interface
6 Avoid Locking Yourself When You Are Configuring Policies In Access Restrictions
7 Profiled Internet Access
8 Setup HTTPS Inspection
9 Integrate AD or OpenLDAP with SafeSquid
10 Create User Groups based on network IP and LDAP (Active directory)
11 Integrate a Linux Host with a Windows AD for Kerberos SSO authentication
12 Adding Users using SafeSquid for Basic Authentication
13 Setup Captive Portal on SafeSquid and Secure WIFI Access Through Active Directory Infrastructure
14 Create Custom Templates
15 Enforce Safe Searches On Gateway
16 YouTube Safety Mode On Gateway
17 Defend Against Malware And External Attacks
18 Defend Against Internal Threats And Data Leakage
19 Setup VPN with SafeSquid Web Security Client
20 Caching Specific websites
21 Prefetch embedded images
22 Advantages Of Custom Web Categorization
23 Create And Manage Your Private Categories
24 Block Personal Gmail And Allow Google Corporate Accounts
25 Allow Social Networking Sites during Lunch Hours
26 Block Virus Uploads And Downloads
27 Block Advertisements And Banners
28 Block Anonymous Proxies
29 Block an Unclassified Web-site by Identifying The True Nature of Served Content With SafeSquid
30 Block Third Party Cookies
31 Block Particular User Login To Facebook Or Gmail
32 DLP Policy to Block Uploading the file type on Web (HTTP/HTTPS)
33 Do Bandwidth Management With Limits
34 Redirect One Website To Another Website
35 Integrate FTP Servers With SafeSquid
36 Setup transparent proxy on SafeSquid
37 Configure SafeSquid as a reverse proxy
38 Analyze The SafeSquid Logs
39 Installation Of Web Security Client
40 Manage Categories From Self Service Portal
41 Manage SafeSquid Instances From Self Service Portal
42 Transparent Redirection With SafeSquid And WCCP
43 Facebook Read Only Mode
44 Facebook specific page Allow
45 Discourage All users from Login,Post,Upload
46 Setup Reporting Module
47 Mail Integration with Reporting Module
48 Bypass HTTPS Inspection Using Request Types
49 Bypass Authentication
50 Use Statistics To View SafeSquid Stats
51 Accessing business applications through SafeSquid
52 Block specific website through SafeSquid
53 Allow specific website through SafeSquid
54 Allow Outlook To Work through SafeSquid
55 Manage Disk Space On SafeSquid Server
56 Unblock the blocked website
57 Deploy SafeSquid Behind Corporate Proxy
58 Debug The Specific Issue
59 Bypassing blocked policies for whitelisted users
60 Block Emails or Files including archives or Social Posts using Keywords
61 Allow remote applications to particular users
62 Enabling HTTPS Inspection causes remote applications to block automatically
63 Enable IP based authentication
64 Viewing SafeSquid UI from outside your network
65 Split the load between different ISPs
66 Reporting (Dashboard)
67 Master Slave Configuration
68 Block Specific Youtube Channel
69 Allow Specific YouTube Channel and its Playlist
70 Access Mobile Applications Through SafeSquid
71 Access Remote Desktop Applications Through SafeSquid
72 Allow Android Facebook Application
73 Block Android Google PlayStore Application
74 Generate Performance Plot From SafeSquid User Interface
75 Generation of Support tarball
76 Setup Cloud Restore

Setup Your Secure Web Gateway With SafeSquid Appliance Builder

Using SafeSquid Appliance Builder (SAB) is the most recommended method for setting up your secure web gateway. SAB is a customized distro of Ubuntu Linux. It enables you to quickly setup your secure web gateway on a standard Intel server hardware, or as a virtual appliance on any virtualization platform like VmWare or Hyper-V.

SAB automatically installs and configures all dependency libraries, and services. Of course you can fine-tune it it later to meet any special needs.

Setup Your Secure Web Gateway on your preferred Linux distribution

SafeSquid Appliance Builder (SAB) is an optimized version of Ubuntu Linux, optimized for easy setup of your secure web gateway. The SAB installs the Ubuntu Linux operating system, downloads and deploys the SafeSquid for Linux installation package, and the necessary dependencies. SafeSquid can also be installed on any other Linux operating system like Red-Hat, SuSe, CentOS, etc.

Setup Your Secure Web Gateway on Windows Server

SafeSquid is designed for primarily Linux platform. However, if you would prefer to set up a secure web gateway for web filtering and content security on Windows, use SafeSquid for Windows.

SafeSquid for Windows is a native port of SafeSquid built for Linux, except for a couple of features. The windows installer for SafeSquid automatically downloads and deploys required dependencies. The installer enables you to easily setup SafeSquid as a native service on any Microsoft Server platform.

Upgrade SafeSquid To A Newer Version

Upgrade your SafeSquid to latest version.

Read more about Upgrade SafeSquid To A Newer Version

Access The SafeSquid User Interface

SafeSquid has an intrinsic Web GUI, that you enables you to manage your installation, setup required policies, and also monitor your secure web gateway.

Read more about Access The SafeSquid User Interface

Avoid Locking Yourself When You Are Configuring Policies In Access Restrictions

Profiled Internet Access

Your secure web gateway serves a variety of users, and applications. Appropriate restrictions ensure the web access boosts efficiency, while curbing non-productive activities. SafeSquid enables you to define policies as access profiles, and ensure compliance. Create policies for users, based on their organizational hierarchy, and business role, to boost productivity.

Read more about Profiled Internet Access

Setup HTTPS Inspection

HTTPS Inspection is the standard Security technology for encrypting a connection between the client and web server.Enable HTTPS inspection on SafeSquid SWG to inspect traffic that is encrypted by the Secure Sockets Layer (SSL) protocol. By that SafeSquid do deep content inspection of encrypted HTTPS traffic. Encrypted content is filtered easily.

Integrate AD or OpenLDAP with SafeSquid

Network enterprises that have a large number of users, popularly manage user credentials via a centralized system. The centralized system ensures user identification across all the networked enterprise resources and services. Users too benefit immensely, as they need a singular credential to access anything across the network enterprise.You can organize all users into groups based on IP addresses, user names or security group memberships in Microsoft Active Directory. Every group gets its own filtering exceptions and blocking rules. Authenticate your domain users using Kerberos, NTLM or Basic LDAP.

Create User Groups based on network IP and LDAP (Active directory)

Setup your users into different User Groups. You can then set restriction policies for specifically these User Groups in the Access Profiles section.

Integrate a Linux Host with a Windows AD for Kerberos SSO authentication

Kerberos Authentication support is particularly useful for Enterprise networks that have a Microsoft AD based Domain controller. By properly configuring the necessary Kerberos related factors, your enterprise Internet users can optionally enjoy Windows Integrated Authentication. Windows Integrated Authentication is a non-interactive authentication process, that uses SSO authentication. SSO ensures that your users do not have to manually provide their user credentials as username / password to access your networked enterprise resources and services, yet their access is restricted as specified. SSO, thus not only just adds convenience to the overall user experience, but also enhances security.

Adding Users using SafeSquid for Basic Authentication

If you don't have LDAP server to integrate with SafeSquid, but you want authenticate users by assigning usernames and passwords to your users.

Setup Captive Portal on SafeSquid and Secure WIFI Access Through Active Directory Infrastructure

Create Custom Templates

Create your own block template to show, when ever the any application or website is blocked by SafeSquid.

Enforce Safe Searches On Gateway

World Wide Web provide extensive knowledge on almost every topic that you can think. Due to the vast information scattered around on the web we sometimes find the content that are irrelevant and inappropriate. We often come across adult/porn content accidentally while we are trying to find some information over internet. This may be faced by children or by someone who isn't supposed to watch pornographic content. Search engines help us big time in searching the appropriate content, but can sometimes mislead us. To avoid this Search engines has started providing with an additional feature Safe-Search.You can setup Safe Searches for different search engines like Google, Yahoo, Bing by using SafeSquid.

YouTube Safety Mode On Gateway

You Restricted mode helps you to screen out potentially objectionable content that you may prefer not to see or don't want others in your network to stumble across while enjoying YouTube. It will not allow the users to turn off the restricted mode.

Read more about YouTube Safety mode on Gateway

Defend Against Malware And External Attacks

Defend Against Internal Threats And Data Leakage

Setup VPN with SafeSquid Web Security Client

Caching Specific websites

Content Caching improves bandwidth efficiency. A page or file, when requested by a user, is served to the user and a copy of it is also maintained locally in the cache. So, when a request is made to fetch the same page or file, it is served with the local copy, instead of 'a fresh fetch'. SafeSquid has a very neat, efficient and manageable Content Caching system.

Read more about Caching Specific websites

Prefetch embedded images

Read more about Prefetch embedded images

Advantages Of Custom Web Categorization

Create And Manage Your Private Categories

Manage your websites list by dividing them to specific categories. You can block or allow all websites by using custom categories. You can manage your categories form self-service portal also. Make all list by websites to allow or block in separate text files and upload them from SafeSquid User Interface.

Block Personal Gmail And Allow Google Corporate Accounts

Block Personal Gmail to ensure Data Security. No sharing of confidential data with personal accounts.You may want to prevent users from signing into Google services using any accounts other than the accounts you provided them with.Auto logout when detected that user is logged into personal Gmail. You can setup SafeSquid to block the access to consumer Google accounts.

Allow Social Networking Sites during Lunch Hours

Allow the access to social networking sites in lunch hours for all users or for specific group of people

Block Virus Uploads And Downloads

Protect your network against viruses, Trojans, malware and other threats. You can block virus uploads and downloads by using SafeSquid. SafeSquid is providing different types of antivirus setups.

Read more about Block Virus Uploads And Downloads

Block Advertisements And Banners

Security was the main reason cited for blocking of Advertisements. Advertisements can be annoying or intrusive. Blocking of advertisements can result in quicker loading and cleaner looking web pages with fewer distractions, lower resource waste (bandwidth, CPU, memory, etc.). You can setup SafeSquid to block all types of annoying advertisements and banners.

Block Anonymous Proxies

An anonymous proxy will allow your users to surf the web anonymously, since it tunnels your data through servers that are spread out across the globe and involve other IP addresses. Anonymous Proxy service enhances your security and lets your users access some restricted websites online. You can block these proxies by using SafeSquid, so that no user access the blocked websites

Block an Unclassified Web-site by Identifying The True Nature of Served Content With SafeSquid

Prevent the users to access the inappropriate content like pornography.

Block Third Party Cookies

You can block the cookies for third-party domains. Control tracking your activity across different sites and you can hide the referer for third-party domains. Now referer is same as hostname. You can also hide the user agents for third-party domains. Instead of original user agent SafeSquid use default user agent. (Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; Win 9x 4.90)).

Read more about Block Third Party Cookies

Block Particular User Login To Facebook Or Gmail

Restrict selective login user-names of logins from Facebook Or Gmail. You just enable default rule and modify your respective username with default ones. Now except selected users all can able to login into Facebook or Gmail.

DLP Policy to Block Uploading the file type on Web (HTTP/HTTPS)

DLP module is primarily used to restrict/prevent uploads of confidential and critical information from any organization. You can select predefined content type(s) in DLP section to prevent their upload(s). You can create multiple policies in DLP section such that all the selected content types will be blocked when any end user tries to upload it.

Do Bandwidth Management With Limits

Define the uploading and downloading limits to specific users or for all users. For example you want to restrict your users to download the file more than specified size.

Read more about Do Bandwidth Management With Limits

Redirect One Website To Another Website

Strictly redirect one URL to another. This is very useful if you want to redirect a certain page to a new location, change the URL structure of a site, remove the "www." portion of the URL, or even redirect users to another website entirely. A redirect automatically sends your website's visitors to a chosen destination. By this feature you can achieve Safe Searches for different search engines.

Integrate FTP Servers With SafeSquid

Integrate your FTP server with SafeSquid. And also you can setup the authentication for FTP sites. You can enable or disable the passive mode also for FTP server access.

Read more about Integrate FTP Servers With SafeSquid

Setup transparent proxy on SafeSquid

Setup the SafeSquid in transparent proxy mode, so that you can eliminate the client side configuration. Typically, the proxy server resides on the gateway and intercepts the requests from the clients. The client doesn't know that there is a proxy server which mediates their requests.

Read more about SafeSquid transparent proxy

Configure SafeSquid as a reverse proxy

Setup the SafeSquid in reverse proxy mode. A reverse proxy by it self appears to the client just like an ordinary web server. No special configuration on the client is necessary. Basically, a reverse proxy is on the web server end which will be used to protect and reduce the load on the webserver.

Analyze The SafeSquid Logs

SafeSquid contains four different types of logs. Each log file has its own importance.

Installation Of Web Security Client

Read more about Web Security Client installation

Manage Categories From Self Service Portal

Manage SafeSquid Instances From Self Service Portal

Transparent Redirection With SafeSquid And WCCP

Facebook Read Only Mode

Facebook specific page Allow

Read more about Facebook specific page Allow

Discourage All users from Login,Post,Upload

Setup Reporting Module

Mail Integration with Reporting Module

Bypass HTTPS Inspection Using Request Types

Bypass Authentication

Use Statistics To View SafeSquid Stats

Accessing business applications through SafeSquid

Block specific website through SafeSquid

Allow specific website through SafeSquid

Allow Outlook To Work through SafeSquid

Manage Disk Space On SafeSquid Server

This article will help you how to free up the disk space when any of the partitions on the SafeSquid server is full. If any of the partition is full you will get errors like disk space is full and SafeSquid server will not process any connection coming from the clients.

Read more about Manage Disk Space On SafeSquid Server

Unblock the blocked website

Read more about Unblock the blocked website

Deploy SafeSquid Behind Corporate Proxy

Use SafeSquid server in proxy chain mode. With simple configuration, you can forward requests to the upstream proxy from SafeSquid proxy server,

Debug The Specific Issue

This page will help you with debug any problem faced during installation and post installation

Read more about Debug The Specific Issue

Bypassing blocked policies for whitelisted users

Block Emails or Files including archives or Social Posts using Keywords

Allow remote applications to particular users

Enabling HTTPS Inspection causes remote applications to block automatically

(Block remote desktop applications, Download managers)

Read more about Block remote desktop applications, Download managers for all users

Enable IP based authentication

Read more about Enable IP based authentication

Viewing SafeSquid UI from outside your network

Split the load between different ISPs

Read more about Split the load between different ISPs

Reporting (Dashboard)

Master Slave Configuration

In a master-slave configuration of SafeSquid, a specific instance of SafeSquid (the master server) manages other instances of SafeSquid (the slave servers). The stand-alone and slave instances are almost identical in functionality.

Read more about Master Slave Configuration

Block Specific Youtube Channel

Read more about Block Specific Youtube Channel

Allow Specific YouTube Channel and its Playlist

Access Mobile Applications Through SafeSquid

Access Remote Desktop Applications Through SafeSquid

Allow Android Facebook Application

Read more about Allow Android Facebook Application

Block Android Google PlayStore Application

Generate Performance Plot From SafeSquid User Interface

Generation of Support tarball

Network related issue or issue regarding policy configuration can be rectified by generating support tarball.

Read more about Generation of Support tarball

Setup Cloud Restore

SafeSquid Cloud restore feature is introduced as a disaster recovery plan(DRP). You can now recover your last configuration saved on cloud backup if any disaster occurs.