Features

Web Filtering Proxy is a full-scale enterprise-grade web filtering solution/security web gateway for the modern Internet. Specifically, the following key features may be of interest for network administrators.

Native Integration with Microsoft Active Directory

It is very easy to support full proxy authentication with Single-Sign-On using Negotiate authentication (both Kerberos and NTLM authentication schemes are supported). Just install the application on any Microsoft Windows server joined to the Active Directory and enable authentication from Admin UI with two mouse clicks. No more additional administrative steps are required for this feature to work.

One Click Deployment to Microsoft Azure

The fully configured instance of virtual machine with latest Web Filtering Proxy version can be deployed into your Azure subscription from Microsoft Azure Marketplace with just several mouse clicks.

Decryption and Inspection of HTTPS Traffic

Web Filtering Proxy can be easily configured to decrypt and inspect HTTPS traffic. It is possible to bypass HTTPS inspection for different web sites and groups of users. Connections to well-known and trusted sites (government, financials, banks) are excluded from decryption automatically.

Group Based Web Filtering

Web Filtering Proxy lets administrator organize the proxy users into groups and assign different levels of strictness of web filtering to them ensuring maximum protection without losing flexibility. Users can be put into groups based on their IP address, address range, subnet or Microsoft Active Directory security group membership. Each group gets its own filtering exceptions and blocking rules. Default deployment contains predefined strict, relaxed and other groups most suitable for homes, small offices or small and medium educational networks. Any domain, web site, URL, IP address, address range or subnet may be excluded from web filtering settings of any group.

Protection from Malware, Phishing and Unwanted Software

Web Filtering Proxy is able to scan all accessed URLs for malware, phishing and other dangerous sites using Google Safe Browsing API. Using this module, you can block access to known dangerous sites for all devices in your network at once. Protection may be adjusted individually per filtering policy.

Antivirus Scanning

The application can scan downloaded files for viruses using ClamAV anti virus engine. Various levels of protection can be configured and individually adjusted per filtering policy.

Blocking of Explicit (Adult) Sites

Web Filtering Proxy blocks access to known adult-only sites by name. The product also performs deep content inspection of all web pages and blocks any page containing adult or explicit language and links to questionable content. Even web sites that are usually considered as not harmful (like Google Search, Yahoo, Bing or YouTube) are filtered and most inappropriate content is blocked. Advanced heuristics module is able to also scan external web links if required.

Control Web Usage by Site Categories

Web Filtering Proxy can be configured to block access to web sites by more than 50 categories (dating, nudity, gambling, explicit adult content, gaming and others). Definition files with categories are regularly updated. Group based web filtering allows for blocking of different categories for different groups, for example - block all adult content for students and block only excessive ads for teachers and IT. Additional dynamic text filtering module uses advanced artificial intelligence algorithms to automatically categorize pages on yet unknown sites.

Supports IWF and CTIRU Block Lists

Diladele B.V. is an active member of Internet Watch Foundation and block list from IWF is included into all our products. Web Filtering Proxy is thus capable of blocking access to inappropriate URLs and online content as specified in IWF block list. In addition, the CTIRU list of prohibited URLs is also part of the product.

Skip Adult Inspection on Trusted Sites

Web Filtering Proxy is capable of excluding categorized and well-known domains from deep content inspection. If a domain is known to be part of a specific category, then contents from this domain is not scanned for adult phrases. This greatly improves quality of web filtering on most educational and informational sites which are known to be free from adult-only content (like for example Wikipedia). Domains general in nature (like Google Search, Youtube, Bing, various blog platforms and social media) cannot be designated as trusted. It is possible to bypass this functionality for locked or strict policies where no adult material should be allowed.

Block File Downloads

Web Filtering Proxy can prohibit file downloads by contents (audio/video/applications), real file types, file names, character sets, transfer encodings and URL regular expressions. File blocking saves internet bandwidth preventing access to extremely large files like ISO, disk images and pictures.

Remove Web Annoyances

The product removes annoying web ads on any web site and in any browser automatically without the need to install additional browser plugins. It also blocks well-known tracking networks and privacy exposing scripts.

Secure Web Proxy Mode (Proxy-Over-TLS)

Web Filtering proxy supports Secure Web Proxy mode of proxy operations, when traffic between the browser and the proxy is secured using TLS. Latest versions of Microsoft Edge, Google Chrome and Mozilla Firefox are supported. It is now very easy to deploy a public secure web filtering proxy in the cloud.

Traffic Monitoring and Web Usage Reporting

The application builds extensive reports for the traffic usage, including summary traffic information with graphs, list of users with download/upload counters, list of browsed domains and table of request activity. Statistics is grouped by day, month and year. Request activity tables can be downloaded as CSV files for further analysis if required.