3.4	Hidden Downloads

The Hidden Downloads view enables the administrator to monitor all unattended downloads from user machines. An unattended download can be one of the following:

•	Valid updates started automatically from the user’s machine

•	Unwanted downloads by hidden applications

•	Interrupted / forgotten downloads initialized by the user. These are downloads that are started by the user and not saved within 15 minutes

•	Malicious downloads that will take advantage of computer software vulnerabilities using sequences of commands.

Screenshot 13 – The Hidden Downloads view

The Hidden Download option displays the following information:

Name	Description
Last Time	The last time the same URL was accessed if the URL radio button is selected, or the last time the same user agent was used if the User Agent radio button is selected.
Count	The number of times the hidden download was accessed.
Real File type	The file type of a hidden download. Click one of the Display radio buttons to show All file types or show Only Executables and Packages.
Content Type	The content type of the hidden download as suggested from the web content-type. To add a content type see Adding Content-types

 

Expand an entry to view each time the hidden download was accessed.

 

Name	Description
Time	The date and time the Hidden download was accessed.
User	Click the User to display all hidden downloads accessed by the selected user.
IP	Click the IP address to display all hidden downloads accessed by the selected IP.
Size	The download size.

From the Group By radio buttons select one of the following display options:

•	URL to show the URL of the downloaded file

•	User Agent to display the agent that started the hidden download.

•	IP to display the IP address of the URL that started the hidden download.

3.4.1

Add hidden downloads to Whitelist

Click on a hidden download to launch the Permanent Whitelist option. To allow the selected URL to be Whitelisted. click Add.

Screenshot 14 – Whitelist hidden download