User manual AVIRA ANTIVIR UNIX WEBGATE

[. . . ] User Manual Avira AntiVir WebGate Avira WebGate Suite www. avira. com Contents Chapter 1. About this Manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 1. 1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1. 2 The Structure of the Manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ] This option could also enable the use of ACLs for a Squid proxy, which is configured by WebGate as parent proxy. The parent proxy must certainly hold the necessary functionality for header analysis. AddXForwardedForHeader 0 AddX ForwardedFor Header 38 AntiVir WebGate Avira GmbH Configuration Allow Client Addresses Allowing connections for certain Clients/ networks: WebGate can activate certain Clients or networks using this option. Single Clients are set using their IP address. A network is set typing a '/' and its netmask (for example, 192. 168. 1. 0/24). AllowClientAddresses 127. 0. 0. 1 192. 168. 0. 0/16 If you do not specify any IP address, the access is not restricted. If you specify at least one IP address, the access is permitted only to the entered IPs. Anyone else has no access. Forbidden Agents Denying access to specific user agents: You can specify one or more user agent strings that will be denied access. The main purpose is to avoid unnecessary traffic generated by clients issuing range requests (such as Microsoft's BITS "Background Intelligent Transfer Service") or streaming services (such as Apple's iTunes). Range requests and data streaming are only permitted if specified in AclConfigFile (see below). ForbiddenUserAgents BITS iTunes Allowing connections for certain ports: WebGate can limit the connections to certain destination ports, using this option. AllowDestinationPorts 21 80 1025-65535 If you do not specify any ports, the access is not restricted. If you specify at least one port, the access is permitted only on the entered ports. Access control scheme: WebGate can also support more complex rules by implementing a Squid-like access control scheme. To use the access control scheme you must create a new configuration file containing the rules describing the desired behavior and have AclConfigFile contain the path to it. The syntax supported by the access control scheme is described in the Manual. AclConfigFile /etc/avwebgate. acl License for the Avira Web Access and Content Control library. This is used for library authentication. This option and both WSKeyFile and WSBlockCategories must be set in order to use the URL filtering capabilities of WebGate. WSLicenseTicket NNNN-NNNN-NNNN-NNNN Key file used by Avira Web Access and Content Control library to encrypt traffic. This option and both WSLicenseTicket and WSBlockCategories must be set in order to use the URL filtering capabilities of WebGate. WSKeyFile /usr/lib/AntiVir/wskeyfile URL filtering: This option and both WSKeyFile and WSLicenseTicket must be set in order to use the URL filtering capabilities of WebGate. [. . . ] These can be backdoors, dialers, jokes and games. AntiVir detects various types of unwanted programs. A file with known signatures for viruses and unwanted programs. In many cases it is enough for an Update to load the most recent version of this file. Unwanted programs VDF (Virus Definition File) 8. 2 Further Information You can find further information on viruses, worms, macro viruses and other unwanted programs at http://www. avira. com . 80 AntiVir WebGate Avira GmbH Appendix 8. 3 Golden Rules for Protection Against Viruses Always keep boot floppy-disks, for your network server and for your workstations. [. . . ]