Configuring supported filetypes to be scanned/blocked

Web Traffic Scanning works on the data objects which are being downloaded. When content is downloaded, GFI WebMonitor will both extract the advertised Content-Type (when applicable/available) as well as determine the real filetype of the downloaded object. Using this information, GFI WebMonitor will check the Web Traffic Scanning processing engine configuration to see how to process the object.

GFI WebMonitor ships with the capability to detect a number of filetypes. For every filetype, you can configure what type of action GFI WebMonitor is to take when processing a downloaded object which matches the indicated filetype.

Screenshot 16 - Configuring filetypes to scan / block

To configure the Web Traffic Scanning action for the listed filetypes:

1. Click on the Configuration } Web Traffic Scanning node.

2. Go to the 'File Type processing options' section.

3. From the list of filetypes supported, click on the filetype to configure. From the action combo box, specify the way which GFI WebMonitor is to act on downloaded objects with the indicated filetype. For every object type the following actions are supported:

Block - block all objects that match the indicated filetype.

Allow (Do not block/scan for viruses) - do not block or scan downloaded objects that match the indicated filetype.

AV Scan (Hide Progress from User) - files which match the indicated Content-Type will be downloaded and scanned for viruses. The user will not be aware that GFI WebMonitor is processing this file prior to passing it on.

AV Scan (Show Progress to User) - files which match the indicated Content-Type will be downloaded and scanned for viruses. The user will be informed that GFI WebMonitor is processing this file prior to passing it on.

Screenshot 17 - AV Scan (Show Progress to User) real-time download feedback in status window

4. Click on the Apply button to save your configuration settings.

NOTE 1: When using the action option 'Scan (Show Progress to User)' GFI WebMonitor will show in real-time on the client web browser, the status of the download in progress on a web page equivalent of the download status. When the download completes, client users can save the downloaded object to disk by using the 'Save to disk' button on the download web page. This process requires the manual intervention of the user in order to save the downloaded object.

NOTE 2: The action option 'Scan (Show Progress to User)' can interfere with auto update sites like windows update. Be sure to add the site which is being contacted for auto updates to the Exclusion list (described further on in this chapter).