GFi WebMonitor for ISA Server is available in 3 editions:
WebFilter Edition: It includes URL filtering and website categorization
WebSecurity Edition: Includes anti-virus, anti-phishing and spyware detection
UnifiedProtection Edition: Combines both WebFilter and WebSecurity edition
All editions support Microsoft ISA Server 2004 and Microsoft ISA Server 2006
Features of GFi WebMonitor - WebFilter Edition
Filter websites that users can browse with the WebGrade Database
GFi WebMonitor enables you to be in control of your Internet resource usage by filtering which websites users can browse. Through its WebGrade Database - a 100% human-reviewed web filtering database that helps organizations to accurately block employees from accessing millions of inappropriate sites such as adult, online gaming,personal email,P2P, Facebook, Myspace, travel websites and many more. You can set up filtering policies based on user/group/IP that specify who can access websites of which category. For example, you might want to block users from accessing news sites or hogging your bandwidth through online video streaming. Websites can either be blocked or else allowed through with an appropriate warning/notification.
Time-based filtering
Each of the filtering policies may be configured to work on a time schedule. This means that administrators can configure the product to allow a particular user/group to access news and entertaiment related websites outside of working hours or during specific time windows.
Mitigate legal liability
Without the ability to exercise some form of control over what your users are browsing, you might be open to lawsuits. Employees can seek legal compensation if you do not shown due diligence in providing a work environment that is free of harassment. To provide this, you must install tools that allow you to block, or at least monitor, access to websites with inappropriate content such as pornography and other adult websites.
Features of GFi WebMonitor - WebSecurity Edition
Scan downloaded files with multiple anti-virus engines
GFi WebMonitoruses multiple anti-virus scanners to scan files that are being downloaded. Using multiple scanners drastically reduces the average time to obtain virus signatures which combat the latest threats, and therefore greately reduces the chances of an infection.
Anti-virus protection through Norman Virus Control and BitDefender
GFi WebMonitor comes with Norman Virus Control and BitDefender. Norman Virus Control is an industrial strength virus engine that has received the 100% Virus Bulletin Award 19 times running. It also has ICSA and Checkmark certification. BitDefender is a very fast and flexible virus engine that excels in the number of formats it can recognize and scan. BitDefender is ICSA certified and has won the 100% Virus Bulletin award and countless awards for its flawless protection. GFI WebMonitor automatically checks and updates the Norman Virus Control and BitDefender definition files as they become available. The GFI WebMonitor price includes updates for one year.
Malware (trojans, spyware, etc) blocking via Kaspersky – optional
To achieve even greater security and benefit from scanning via multiple virus engines, users can add the Kaspersky SuperSecure anti-virus engine, available as an optional add-on. The Kaspersky SuperSecure database includes support for the detection of malicious software that can perform remote administration, keyboard espionage, password detection, automatic dial-up to paid sites, automatic downloads of files containing explicit materials and more. GFI WebMonitor automatically checks and updates the Kaspersky definition files as they become available.
Protect against socially engineered phishing websites
Phishing is a social engineering technique that is maliciously used by hackers to acquire information such as usernames, passwords and credit card details by leading users to believe that they are passing on these details to the genuine company. Online shopping and credit card companies are amongst the most targeted phishing websites. GFI WebMonitor protects users from the potential risks of social engineering by blocking access to phishing websites. This is done through the use of an auto-updatable database of phishing URLs.
Control which file types users can download
You can create multiple user/group/IP based download control policies in order to block particular file types (such as Javascript, MP3, MPEG, exe, and more) from being downloaded by particular users. Dangerous files (such as trojan downloader programs) often attempt to penetrate a system masked as an innocuous files. GFI WebMonitor uses its built-in file signature scanner to analyze and detect the REAL filetype signatures of downloaded HTTP/FTP files.
Features of GFI WebMonitor - UnifiedProtection Edition (common features)
Monitor or block a connection in real-time
Administrators can see what websites the users are currently browsing and what files are being downloaded. An active connection, browsing session or download can be easily blocked by simply clicking on the block connection icon. For example, you may decide to interrupt the download of a large file that a user is downloading.
Monitor or block applications' hidden downloads
Some software applications automatically connect to their home pages to download updates using HTTP tunnelling. Although this can reduce administration, it can also present a security risk because unknown applications or trojans can use the same technique to download malicious files onto a user's PC, without the user knowing, including spyware, adware and pornware. GFI WebMonitor allows you to control which sites are allowed to distribute updates (for example www.microsoft.com).
Monitor bandwidth
Through the user and the site bandwidth monitoring features the administrator has the ability to track download and upload traffic and the number of URL hits over time, either on a user basis or on a website basis. Real-time monitoring may be achieved through drilldown reporting enhanced with graphs withing the user interface.
Allow exceptions through whilelist and blacklist Any URL/user/IP can be added permanently or temporarily to the whitelist or blacklist in order to bypass all web filtering and web security policies. For example, you may want to grant access to a particular user only to temporarily access his personal webmail account for a specified time period.
Controlled access to the configuration and monitoring interfaces
GFi WebMonitor allows you to select which users can access its configuration and monitoring interfaces. You can assign such rights based on either the IP of the computer from which access is being made or by domain-authenticated username of the client trying to load the configuration. Only users in GFi WebMonitor's authorized users/IP list of will be given access.
System Requirements
Windows 2000 (SP4), 2003 operating system
Microsoft ISA Server 2004 or later
Internet Explorer 6 or later
.NET Framework 2.0