Wfquery
From Wiki of WFilter NG Firewall
(Difference between revisions)
(→Web Recording) |
(→System) |
||
| (8 intermediate revisions by one user not shown) | |||
| Line 4: | Line 4: | ||
* Web Surf | * Web Surf | ||
* Web Post | * Web Post | ||
| − | |||
* Outgoing Emails | * Outgoing Emails | ||
* Incoming Emails | * Incoming Emails | ||
| − | * | + | * File Upload History |
| + | * File Download History | ||
| + | * IM Accounts | ||
| + | * FTP/Telnet Sessions | ||
| + | * IP-MAC History | ||
| + | * Connection Details | ||
This module works both in "gateway mode" and "bridge mode". Enterprise license is required. | This module works both in "gateway mode" and "bridge mode". Enterprise license is required. | ||
| + | |||
| + | [[File:Wfrecorder_query1.png|800px]] | ||
| + | |||
| + | [[File:Wfrecorder_query2.png|800px]] | ||
| + | |||
| + | [[File:Wfrecorder_query3.png|800px]] | ||
| + | |||
| + | [[File:Wfrecorder_queryftp.png|800px]] | ||
| + | |||
| + | [[File:Wfrecorder_queryim.png|800px]] | ||
| + | |||
| + | [[File:Wfrecorder_querysessions.png|800px]] | ||
| + | |||
| + | [[File:Wfrecorder_querysessions.png|800px]] | ||
| + | |||
| + | [[File:Wfrecorder_queryconnections.png|800px]] | ||
== Recording Policy == | == Recording Policy == | ||
| Line 15: | Line 35: | ||
For every client, multiple policies can be applied. For example: | For every client, multiple policies can be applied. For example: | ||
* A policy: record web surfing for a whole subnet. | * A policy: record web surfing for a whole subnet. | ||
| − | * B policy: enable " | + | * B policy: enable "email recording" for a special IP in this subnet. |
| − | For this ip, both "web surfing recording" and " | + | For this ip, both "web surfing recording" and "email recording" will be enabled. |
| − | + | Detailed "recording policy" settings are described in below. | |
=== Web Recording === | === Web Recording === | ||
| − | * '''Web Surf''': record titles of visited web pages for http websites. For https websites, only domains will be recorded. To record https webpages, please | + | * '''Web Surf''': record titles of visited web pages for http websites. For https websites, only domains will be recorded in default. To record https webpages, please check [[Sslinspect|"SSL Inspector"]]. |
| − | * '''Web Post''': record web post content for http websites. To record https | + | * '''Web Post''': record web post content for http websites. To record https websites posts, please check [[Sslinspect|"SSL Inspector"]]. |
* '''Web Post Size Limit''': no recording of web post exceeds size limit. | * '''Web Post Size Limit''': no recording of web post exceeds size limit. | ||
| − | |||
* '''Smart Filter''': With this feature enabled, WFilter will not record visits by non-human. (Not 100% accurate) | * '''Smart Filter''': With this feature enabled, WFilter will not record visits by non-human. (Not 100% accurate) | ||
* '''Domains Exception''': no recording of domains in the exception list. Wildcards "*?" are supported. | * '''Domains Exception''': no recording of domains in the exception list. Wildcards "*?" are supported. | ||
| − | [[File: | + | |
| + | [[File:Wfrecorder_setweb_en2.png|650px]] | ||
=== Email Recording === | === Email Recording === | ||
| Line 33: | Line 53: | ||
[[File:Wfrecorder_sermail_en.jpg|650px]] | [[File:Wfrecorder_sermail_en.jpg|650px]] | ||
| − | |||
* Emails supported: SMTP, POP3, IMAP4 and outgoing web-based emails. | * Emails supported: SMTP, POP3, IMAP4 and outgoing web-based emails. | ||
| − | * | + | * For emails exceed size limit, only subject/from/to will be recorded. |
| − | * To record ssl emails(SMTP/POP/IMAP over SSL), | + | * To record ssl emails(SMTP/POP/IMAP over SSL), please check [[Sslinspect|"SSL Inspector"]]. |
| − | + | ||
| − | == | + | === File Transfers === |
| − | [[File: | + | [[File:Wfrecorder_settings_ftp.png|650px]] |
| − | + | * File transfers supported: FTP upload, FTP download, Web download, Web upload. | |
| − | * | + | * WFilter only records filenames/URLs of downloaded files. While full file content can be recorded for uploading files. |
| − | * | + | * For uploading files exceed size limit, only filenames can be recorded. |
| − | * | + | * To record files via https, you need to enable "HTTPS Inspector". |
| − | === | + | === Others === |
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | [[File:Wfrecorder_settings_other.png|650px]] | |
| − | + | Options to enable IM acounts and FTP/Telnet sessions. | |
| − | * | + | * Only QQ messenger IDs can be recorded. |
| − | * | + | * When "FTP/Telnet Sessions" is enabled, sent FTP/Telnet commands can be recorded. |
| + | * IP-MAC History: daily IP-MAC address history. | ||
| + | * Connections: detail of TCP connections history. | ||
| − | === | + | == Advanced Settings == |
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | === | + | === System === |
| − | + | * '''IPv6''': enable recording of IPv6 activities. | |
| − | * | + | * '''Database Commit''': the database commit frequency. |
| − | * | + | * '''Additional Webmail Domains''': Custom webmails to be recorded. |
| − | + | * '''Protocol Ports''', customize protocols ports for HTTP, HTTPS, POP3, IMAP4 and SMTP. | |
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | [[File:Wfrecorder_advanced_en2.png]] | |
Latest revision as of 15:46, 8 May 2023
Contents |
[edit] 1 Internet Usage Monitoring
The "Internet Usage Monitoring" module records internet activities, including:
- Web Surf
- Web Post
- Outgoing Emails
- Incoming Emails
- File Upload History
- File Download History
- IM Accounts
- FTP/Telnet Sessions
- IP-MAC History
- Connection Details
This module works both in "gateway mode" and "bridge mode". Enterprise license is required.
[edit] 2 Recording Policy
For every client, multiple policies can be applied. For example:
- A policy: record web surfing for a whole subnet.
- B policy: enable "email recording" for a special IP in this subnet.
For this ip, both "web surfing recording" and "email recording" will be enabled.
Detailed "recording policy" settings are described in below.
[edit] 2.1 Web Recording
- Web Surf: record titles of visited web pages for http websites. For https websites, only domains will be recorded in default. To record https webpages, please check "SSL Inspector".
- Web Post: record web post content for http websites. To record https websites posts, please check "SSL Inspector".
- Web Post Size Limit: no recording of web post exceeds size limit.
- Smart Filter: With this feature enabled, WFilter will not record visits by non-human. (Not 100% accurate)
- Domains Exception: no recording of domains in the exception list. Wildcards "*?" are supported.
[edit] 2.2 Email Recording
- Emails supported: SMTP, POP3, IMAP4 and outgoing web-based emails.
- For emails exceed size limit, only subject/from/to will be recorded.
- To record ssl emails(SMTP/POP/IMAP over SSL), please check "SSL Inspector".
[edit] 2.3 File Transfers
- File transfers supported: FTP upload, FTP download, Web download, Web upload.
- WFilter only records filenames/URLs of downloaded files. While full file content can be recorded for uploading files.
- For uploading files exceed size limit, only filenames can be recorded.
- To record files via https, you need to enable "HTTPS Inspector".
[edit] 2.4 Others
Options to enable IM acounts and FTP/Telnet sessions.
- Only QQ messenger IDs can be recorded.
- When "FTP/Telnet Sessions" is enabled, sent FTP/Telnet commands can be recorded.
- IP-MAC History: daily IP-MAC address history.
- Connections: detail of TCP connections history.
[edit] 3 Advanced Settings
[edit] 3.1 System
- IPv6: enable recording of IPv6 activities.
- Database Commit: the database commit frequency.
- Additional Webmail Domains: Custom webmails to be recorded.
- Protocol Ports, customize protocols ports for HTTP, HTTPS, POP3, IMAP4 and SMTP.
