XII. Firewall/Security Features

The GlobalView Web Content Filtering is a Content Security Management feature that is applied using the router's firewall, this makes it possible to use the firewall to control which users the Web Content Filtering would apply to.

If the Web Content Filter is applied from the Firewall – General Setup – Default Rule page, it will apply to all computers on the network. To make an exception from this, it is necessary to set up a firewall filter rule because the filter rules are processed with higher priority than the Default Rule.

In this example, IP Objects and Groups will be used because that is the easiest way to apply a filter rule to multiple users / IP addresses.

---

To configure an IP Object, go to the Objects Setting – IP Object page and create an IP Object on there; these can apply to Single IP addresses, Range IP Addresses, MAC addresses or Network Addresses. This example shows an IP Object configured for the IP address 192.168.1.10:

Configure multiple IP Objects as required if it’s necessary to exempt multiple IP addresses from the Web Content Filtering:

These can be applied to an IP Group, which makes it easier to manage a large number of IP Objects from the Objects Setting – IP Group page by creating a new IP Group and in there, add IP Objects to the group as needed:

Once that is configured, go to Firewall – Filter Setup then 2. Default Data Filter:

On there, select the first un-used filter rule which would be filter rule 2 on a router with default settings:

Configure the filter rule as shown, set the Comment as required and select the Web Content Filter profile that’s required – this could be either None to fully exempt IP addresses this would apply to from the content filter. This could be used to apply a less restrictive Web Content Filter profile instead.

To select the IP addresses this would apply to, click Edit for the Source IP and select the IP Group configured from the pop-up:

When selecting the Source IP settings, set the Address Type to “Group and Objects” then select the IP Group the rule should apply to:

---

How do you rate this article?