Expired

XII. Firewall/Security Features

Expired

Activating the New URL Reputation Web Content Filter Licence

Products:
Vigor 2135ax
Vigor 2620Ln
Vigor 2760
Vigor 2762
Show all

Keywords:
CSM
Content Filter
Content Security Management
Cyren
Show all

The URL Reputation service provides a new level of Web Content Filtering protection. A URL Reputation subscription allows your DrayTek router to check the websites' category according to content type so that your users, or groups of users, are blocked from accessing those categories which you consider inappropriate or unsuitable.

This article demonstrates the steps required to activate the web content filtering on DrayTek routers that run URL Reputation compatible firmware. The steps also cover the previous provider (Cyren) that is still in use.

  1. (optional) Create a new MyVigor account
  2. Add the router to MyVigor system
  3. Activation of the WCF licence
  4. WCF Configuration & Troubleshooting

Create a new MyVigor account 

If you have not registered your MyVigor account, create an account on https://myvigor.draytek.com
Click the Create Account link 

kb url reputation trial

Go through the registration steps, including the T&C statements.

kb url reputation trial

Creating an account requires a valid e-mail address. A verification email will be sent to your mailbox during the registration process.

kb url reputation trial

Once your MyVigor account has been created, you can add your first Vigor router.

kb url reputation trial

Adding your DrayTek router to MyVigor

Before proceeding, make sure that the latest firmware is installed on your router. Please refer to this guide for details.

Now, add your router to the MyVigor account. Access your router's Web interface and select [CSM] > [Web Content Filter Profile]. This will show the current state of the Web Content Filtering licence for the router, which will display '[Status : Not Activated]' initially.
Click the 'Activate' button shown:

kb url reputation trial

A new window will pop up. You should be asked to log in to MyVigor account.

Note that the registration process can only be completed in this window with the unique URL that will start with MyVigor domain, followed by the MAC address of the router and a randomly generated variable, e.g.,
https://myvigor.draytek.com/login?mac=1234bc0a1234&var=012345...

kb url reputation trial

Activation of the WCF licence

Once the router is linked with your MyVigor account, you can activate the WCF protection and other services.

If your router is running a compatible firmware version with the new WCF provider, activate the recommended URL Reputation section.

kb url reputation trial

If you have not signed up to our beta testing programme yet, and your router is running regular firmware that is not yet compatible with URL Reputation, select Cyren section instead.

kb url reputation trial

Your router should now work with one of the selected WCF providers. If you want to check your subscription status, go to [CSM] > [Web Content Filter Profile]. If the Web Content Filter service is active, the Status will display Cyren or URL Reputation. The start date and expiry date of the filter licence are also shown.

kb url reputation trial

WCF Configuration

Open the [CSM] > [Web Content Filter Profile] page, if you have not opened it yet. Select one of the profiles to define the WCF categories.

kb url reputation trial

For URL Reputation categories, make sure that the latest compatible firmware is installed on the router. Then, the new categories can be selected, including 9 security-focused options. The URL Reputation provides dynamic real time threat update protection that can send updates every 5 minutes. Here is the screenshot of the new category page:

kb url reputation trial

The next step is identical for Cyren and URL Reputation users.
Configure the [CSM] > [DNS Filter Profile] to include the end user DNS queries. Make sure that the WCF profile configured earlier is selected.

kb url reputation trial

CSM profiles can be added to the firewall to block unwanted content. Navigate to [Firewall] > [Filter Setup] and open one of the sets. Then click on one of the available rules (Filter Set 1 Rule 2 is used for this guide).

kb url reputation trial

If you want to check that the router is detecting specified categories or for troubleshooting purposes, enable syslog. Logs should include the source IP and destination address, WCF category, service provider (here URL Reputation), and the action (Block).

kb url reputation trial


How do you rate this article?

1 1 1 1 1 1 1 1 1 1