User manual AVIRA WEBGATE SUITE

[. . . ] User Manual Avira AntiVir WebGate | WebGate Suite www. avira. com Contents 1 About this Manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 1. 1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 1. 2 The Structure of the Manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 1. 3 Signs and Symbols . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 1. 4 Abbreviations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ] WebGate does not interfere with the transaction, it just forwards the data. Due to this fact, it can not verify if the protocol being spoken is really HTTP on top of SSL. For this reason, it allows only connections to ports 443 (HTTPS) and 563 (SNEWS). Default: AllowHTTPSTunnel no The data transferred through the HTTPS tunnel will not be scanned by WebGate. AllowedHTTP ConnectPorts Tunneling SSL-encrypted connections: If you want to allow HTTPS connections to non-standard ports, you can do so by adding the desired ports to this list. Each port will be separated by a comma or a whitespace. AllowedHTTPConnectPorts 443, 563 Maximum number of connections allowed: The maximum number of simultaneous connections allowed to run through WebGate. A thread is created for every connection. The value sets the limit for the number of connections or threads allowed simultaneously. Default: MaxConnections 1024 Avoiding Client-timeouts by large downloads: Some browsers and proxies send an error message, if no data is received after a certain interval (timeout). WebGate may come to such timeout messages, because of delays during large downloads and scanning. In order to avoid timeouts, WebGate offers the following possibilities. · If the Client is a browser, WebGate sends an HTML progress page, which is updated at regular intervals. Default: RefreshInterval 0 Max Connections Refresh/ Redirect/ Keepalive Interval Avira GmbH Avira AntiVir WebGate 27 Configuration · If the option RefreshInterval is deactivated or the Client is not a browser, (temporary) HTTP redirects are sent to the Client. Thus, the Client is cyclically redirected to a dynamic-generated URL, intercepted by WebGate in order to avoid the timeout. Default: RedirectInterval 0 The above method does not work for all Clients. When encountering problems, use the KeepaliveInterval option, to make WebGate send messages to the Client at certain intervals. The value must be smaller than the one set in the Client or proxy server. Default: KeepaliveInterval 30 If you encounter client timeout problems, because the timeout methods described above are not appropriate in your environment or do not work properly, you may enable data trickling by setting KeepaliveMode in avwebgate. conf to trickle. If this method is used, WebGate sends small pieces of the data at the specified KeepaliveInterval, until the download and scan is complete. Once the file is downloaded and scanned, the remainder of the file will be immediately transferred to the client (if clean). · KeepaliveMode · It is NOT recommended to enable data trickling unless you are experiencing problems using the other timeout prevention methods. Be aware of the risks and limitations before you enable this feature. In MANUAL. avwebgate under "Client Timeout Prevention", you can find more details about related parameters, limitations and about setting domain/ file type rules. HTTPProxy. . . Settings for HTTP proxy server: These settings work only for Network Configuration 1. [. . . ] These can be backdoors, dialers, jokes and games. AntiVir detects various types of unwanted programs. A file with known signatures for viruses and unwanted programs. In many cases it is enough for an Update to load the most recent version of this file. Unwanted programs VDF (Virus Definition File) 8. 2 Further Information You can find further information on viruses, worms, macro viruses and other unwanted programs at http://www. avira. com . Avira GmbH Avira AntiVir WebGate 47 Appendix 8. 3 Golden Rules for Protection Against Viruses Always keep boot floppy-disks, for your network server and for your workstations. [. . . ]