Contents

Related Topics

Get Started with WebBlocker (WSM)

Before You Begin

Before you activate WebBlocker, you must decide which type of WebBlocker server you want to use, and make sure that the WebBlocker subscription service has been activated for your device.

  • Activate the WebBlocker license key and import the feature key to your Firebox.
    For more information, see Get a Firebox Feature Key.
  • If you want to use a locally installed WebBlocker Server with SurfControl categories, you must install the WebBlocker Server on your management computer. For more information, see Set Up a WebBlocker Server.

Activate WebBlocker

You can use Policy Manager to activate WebBlocker on your Firebox.

  1. Open Policy Manager.
  2. Select Subscription Services > WebBlocker > Activate.
    The Activate WebBlocker Wizard starts.
  3. Click Next.
    The first page of the wizard appears. The page you see depends on your configuration.
  4. Complete the wizard, as described in the subsequent sections.

Select Policies for WebBlocker

If you have already created an HTTP-proxy or an HTTPS-proxy policy on your Firebox, the Select policies for WebBlocker page appears. To add a WebBlocker action to a policy in the list, select the check box for that policy.

If you do not select any policies, the Activate WebBlocker Wizard wizard creates a new HTTP-proxy policy with a WebBlocker action.

Screen shot of the Activate WebBlocker Wizard, select policies for WebBlocker dialog box

If you have not yet defined an HTTP-proxy or an HTTPS-proxy policy, this page does not appear.

Identify the WebBlocker Servers

On the Identify the WebBlocker servers page, you choose which type of WebBlocker server to use.

Select one of these options:

Use the Websense cloud for WebBlocker lookups

Websense cloud is a URL categorization database provided by Websense. The Websense cloud option does not use a locally installed WebBlocker Server. When you activate WebBlocker, this option is selected by default.

If you have a WatchGuard XTM 21, 22, or 23 device, this feature is not available for your device.

Use a WebBlocker Server with SurfControl

The WebBlocker Server is a WatchGuard server that uses a URL categorization database provided by SurfControl. If you select this option for any Firebox other than an XTM 2 Series, XTM 33, or Firebox T10, you must add the IP address of at least one locally installed WebBlocker Server.

To use the Websense cloud as your WebBlocker Server, accept the default setting. It is not necessary for you to install a WebBlocker Server or configure any server settings. Click Next to continue to the next step of the wizard.

Screen shot of the Activate WebBlocker Wizard, identify the WebBlocker servers dialog box

To use a local WebBlocker Server:

  1. Select Use a WebBlocker Server with SurfControl (54 categories).
  2. Click Add.
  3. In the Server IP text box, type the IP address of the WebBlocker Server.
  4. If necessary, change the port number.

You can add a backup WebBlocker Server that the Firebox can fail over to if it cannot connect to the primary server. The first server in the list is the primary server.

To move a server in the list:

  1. Select a server.
  2. Click Move Up or Move Down.

If your device is an XTM 2 Series or XTM 33, WebBlocker uses a WebBlocker Server hosted by WatchGuard by default. You can configure WebBlocker to use a locally configured WebBlocker Server:

  1. Select Use a WebBlocker Server with SurfControl (54 categories).

Screen shot of the Identify WebBlocker Servers page - with option for XTM 2 and XTM 33

  1. Select Locally installed WebBlocker server.
  2. Click Add.
  3. In the Server IP text box, type the IP address of the WebBlocker Server.
  4. If necessary, change the port number.

You can also add or change the WebBlocker Servers after you complete the wizard. For more information, see Configure WebBlocker Servers.

Select Categories to Block

On the Select categories to block page, you can select the content categories that you want WebBlocker to block. By default, all categories are allowed. Select a category to see a category description. The available categories depend on which WebBlocker server option you chose.

Configure Websense Cloud Categories

If you configured WebBlocker to use the Websense cloud option, you configure the action for each Websense category or subcategory. Select the check box adjacent to a category to select all subcategories.

  1. Click a category name to see the category description below the list.
  2. In the category list, select each category or subcategory that you want to block.
  3. To block access to websites that match all categories, select the Deny All Categories check box.

Screen shot of the Activate WebBlocker Wizard Select categories to block page for Websense cloud

  1. To configure the action to take for uncategorized websites, from the When a URL is uncategorized drop-down list, select Allow or Deny.

For more information about Websense cloud content categories, see About WebBlocker Websense Categories.

Configure SurfControl Categories

If you configured WebBlocker to use a WebBlocker Server with SurfControl, you select which SurfControl categories to block.

  1. Click a category name to see the category description below the list.
  2. Select the check box for each content category you want to block.
  3. To block access to websites that match all categories, select the Deny All Categories check box.

For more information about SurfControl content categories, see About WebBlocker SurfControl Categories.

To make sure users cannot go to websites that attempt to hide their identities, block the SurfControl Proxies & Translators category.

See Also

About WebBlocker

Give Us Feedback     Get Support     All Product Documentation     Technical Search