Get Started with WebBlocker

Before You Begin

Before you activate WebBlocker, you must ensure that the WebBlocker subscription service has been activated for your device. To activate the WebBlocker license key and import the feature key to your Firebox, see Get a Firebox Feature Key.

Activate WebBlocker

You can use the WebBlocker Activation Wizard to activate WebBlocker on your Firebox and create a basic configuration.

In the wizard you specify what to do when users try to open websites in each content category. You can select from these options:

  • Allow — The website opens.
  • Deny — The website does not open. A deny page appears in the browser.
  • Warn (Fireware v12.4 and higher) — The website does not open. A warning page appears in the browser. Users can select to continue to the website or go back to the previous page.

The wizard creates a new WebBlocker action and assigns it to the selected HTTP-proxy and HTTPS-proxy policies. If no HTTP-proxy and HTTPS-proxy policies exist, you can use the wizard to create new ones.

In Fireware v11.12 or higher, the Web Setup Wizard and WSM Quick Setup Wizard automatically configure the Default-HTTP-Client proxy action to use a WebBlocker action called Default-WebBlocker. For more information, see Setup Wizard Default Policies and Settings.

Configure a WebBlocker Action

After you use the Activate WebBlocker Wizard to create a basic configuration, you can configure additional WebBlocker settings for the new WebBlocker action.

To configure a WebBlocker action:

  1. Open the WebBlocker Actions page.
    In Policy Manager, select Subscription Services > WebBlocker > Configure.
    In Fireware Web UI, select Subscription Services > WebBlocker.

Screen shot of the WebBlocker page

WebBlocker Actions page in Fireware Web UI

Screen shot of the WebBlocker Actions dialog box

WebBlocker Actions dialog box in Policy Manager

  1. Select the WebBlocker action to configure.
  2. Click Edit.
  3. Configure the WebBlocker settings. The Edit WebBlocker Action page includes tabs that you can use to:
  4. Click Save or OK.
    In the Fireware Web UI, click Test to enter a URL to test against a specific WebBlocker action.

Configure the HTTP-Proxy and HTTPS-Proxy Policies

To use WebBlocker, your configuration must have an HTTP-proxy policy and an HTTPS-proxy policy that each use a user-defined proxy action.

If your configuration does not already have these policies, you can create new policies when you run the WebBlocker Activation Wizard.

For more information about proxy actions, see About Proxy Actions.

Apply a WebBlocker Action to HTTP-Proxy and HTTPS-Proxy Actions

To enable WebBlocker for an HTTP-proxy or HTTPS-proxy policy, you apply a WebBlocker action to the proxy action the policy uses. You can only apply a WebBlocker action to a user-created proxy action.

For WebBlocker to deny all web content that matches the configured categories, you must enable WebBlocker in both the HTTP-proxy and HTTPS-proxy policies.

If you enable content inspection in the HTTPS-proxy action, make sure that you also enable WebBlocker in the HTTP-proxy action used for content inspection. For more information, see HTTPS-Proxy: Content Inspection.

Related Topics

About WebBlocker

Video tutorial: Getting Started with WebBlocker