Security Access

 

Domain Classification

Domain Types

  1. abortion – Abortion information excluding when related to religion
  2. ads – Advert servers and banned URLs
  3. adult – Sites containing adult material such as swearing but not porn
  4. aggressive – Similar to violence but more promoting than depicting
  5. antispyware – Sites that remove spyware
  6. artnudes – Art sites containing artistic nudity
  7. astrology – Astrology websites
  8. audio-video – Sites with audio or video downloads
  9. banking – Banking websites
  10. beerliquorinfo – Sites with information only on beer or liquors
  11. beerliquorsale – Sites with beer or liquors for sale
  12. blog – Journal/Diary websites
  13. cellphones – stuff for mobile/cell phones
  14. chat – Sites with chat rooms etc
  15. childcare – Sites to do with childcare
  16. cleaning – Sites to do with cleaning
  17. clothing – Sites about and selling clothing
  18. contraception – Information about contraception
  19. culnary – Sites about cooking et al
  20. dating – Sites about dating
  21. desktopsillies – Screen savers, backgrounds, cursers, pointers, desktop themes
  22. dialers – Dialers such as those for pornography or trojans
  23. drugs – Drug related sites
  24. ecommerce – Sites that provide online shopping
  25. entertainment – Sites that promote movies, books, magazine, humor
  26. filehosting – Sites to do with filehosting
  27. frencheducation – Sites to do with french education
  28. gambling – Gambling sites including stocks and shares
  29. games – Game related sites
  30. gardening – Gardening sites
  31. government – Military and schools etc
  32. guns – Sites with guns
  33. hacking – Hacking/cracking information
  34. homerepair – Sites about home repair
  35. hygiene – Sites about hygiene and other personal grooming related stuff
  36. instantmessaging – Messenger client download and web-based messaging sites
  37. jewelry – Sites about and selling jewelry
  38. jobsearch – Sites for finding jobs
  39. kidstimewasting – Sites kids often waste time on
  40. mail – Webmail and email sites
  41. marketingware – Sites about marketing products
  42. medical – Medical websites
  43. mixed_adult – Mixed adult content sites
  44. mobile-phone – Sites to do with mobile phones
  45. naturism – Sites that contain nude pictures and/or promote a nude lifestyle
  46. news – News sites
  47. onlineauctions – Online auctions
  48. onlinegames – Online gaming sites
  49. onlinepayment – Online payment sites
  50. personalfinance – Personal finance sites
  51. pets – Pet sites
  52. phishing – Sites attempting to trick people into giving out private information.
  53. porn – Pornography
  54. proxy – Sites with proxies to bypass filters
  55. radio – non-news related radio and television
  56. religion – Sites promoting religion
  57. ringtones – Sites containing ring tones, games, pictures and other
  58. searchengines – Search engines such as google
  59. sect – Sites about eligious groups
  60. sexuality – Sites dedicated to sexuality, possibly including adult material
  61. shopping – Shopping sites
  62. socialnetworking – Social networking websites
  63. sportnews – Sport news sites
  64. sports – All sport sites
  65. spyware – Sites who run or have spyware software to download
  66. updatesites – Software updates including virus sigs
  67. vacation – Sites about going on holiday
  68. violence – Sites containing violence
  69. virusinfected – Sites who host virus infected files
  70. warez – Sites with illegal pirate software
  71. weather – Weather news sites and weather related
  72. weapons – Sites detailing or selling weapons
  73. webmail – Just webmail sites
  74. whitelist – Contains site specifically 100% suitable for kids

Domain Operation

  1. Allow or Disallow
  2. Log or No Log

2. Large Classification Types
Each Address can have up 64 community specific and 64 manager specific classification

3. Real Time Update
User
base on both IP address and host name

Each user can have up to 3 sets

Set type:
– Manager specific
– Community specific
– Customer specific

SSL Block – except white listed ones

Each manager has its own s

– combine up to

Content Scanner

Traffic Classification

Protocol Types

  1. 100bao
  2. aim
  3. aimwebcontent
  4. applejuice
  5. ares
  6. armagetron
  7. audiogalaxy
  8. battlefield1942
  9. battlefield2
  10. battlefield2142
  11. bgp
  12. biff
  13. bittorrent
  14. chikka
  15. cimd
  16. ciscovpn
  17. citrix
  18. counterstrike-source
  19. cvs
  20. dayofdefeat-source
  21. dazhihui
  22. dhcp
  23. directconnect
  24. dns
  25. doom3
  26. edonkey
  27. fasttrack
  28. finger
  29. freenet
  30. ftp
  31. gkrellm
  32. gnucleuslan
  33. gnutella
  34. goboogy
  35. gopher
  36. gtalk
  37. guildwars
  38. h323
  39. halflife2-deathmatch
  40. hddtemp
  41. hotline
  42. httpaudio
  43. httpcachehit
  44. httpcachemiss
  45. http-dap
  46. http-freshdownload
  47. http-itunes
  48. http-rtsp
  49. httpvideo
  50. http
  51. ident
  52. imap
  53. imesh
  54. ipp
  55. irc
  56. jabber
  57. kugoo
  58. live365
  59. liveforspeed
  60. lpd
  61. mohaa
  62. msn-filetransfer
  63. msnmessenger
  64. mute
  65. napster
  66. nbns
  67. ncp
  68. netbios
  69. nntp
  70. ntp
  71. openft
  72. pcanywhere
  73. poco
  74. pop3
  75. pplive
  76. pressplay
  77. qq
  78. quake-halflife
  79. quake1
  80. quicktime
  81. radmin
  82. rdp
  83. replaytv-ivs
  84. rlogin
  85. rtp
  86. rtsp
  87. runesofmagic
  88. shoutcast
  89. sip
  90. skypeout
  91. skypetoskype
  92. smb
  93. smtp
  94. snmp
  95. snmp-mon
  96. snmp-trap
  97. socks
  98. soribada
  99. soulseek
  100. ssdp
  101. ssh
  102. ssl
  103. stun
  104. subspace
  105. subversion
  106. teamfortress2
  107. teamspeak
  108. telnet
  109. tesla
  110. tftp
  111. thecircle
  112. tonghuashun
  113. tor
  114. tsp
  115. unknown
  116. unset
  117. uucp
  118. validcertssl
  119. ventrilo
  120. vnc
  121. whois
  122. worldofwarcraft
  123. x11
  124. xboxlive
  125. xunlei
  126. yahoo
  127. zmaap

File Types

Note:
– Cannot be used with Protocol Types classification
– Cannot match files transferred with SMB
– Only match the first file in each HTTP connection

  1. exe
  2. flash
  3. gif
  4. html
  5. jpeg
  6. mp3
  7. ogg
  8. pdf
  9. perl
  10. png
  11. postscript
  12. rar
  13. rpm
  14. rtf
  15. tar
  16. zip

Protocol Operation

    Allow Or Drop

QoS

 

URL Replacement – force safe mode

Block all SSL control except those on whitelist

 

Encryption Control (SSL Traffic)

Switch Features

1. Block all SSL connections except to sites on white list.

2. Block all SSL connection except through proxy (proxy:443)

Station Features

1. Header analysis and manipulation so you can manipulate cookies
2.