Datasheet

Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 3
The TrustedSource™ Web Filter master database, hosted on the internet and cached locally within the
X family device, is updated constantly to ensure the very latest protection is available. Filtering policies
can be applied on a per-user or group basis via the X-Family's LDAP directory integration, thus
enabling fine-grained and automated control.
Two optional system level controls are provided on the web filter service configuration page:
a) Filter Embedded URLs
Some web sites (e.g. proxies, portals, search engines, anonymizers or translation services) will
fetch another web page on behalf of the client. Such sites can be used to bypass web filter
solutions that only categorize the target web page itself.
Enabling the Filter Embedded URLs setting makes the X Family device check the URLs sent as
parameters to such proxy sites. A request to the target site will be blocked whether it is accessed
directly or indirectly.
b) Filter Search Engine Requests
This setting disables scanning of the search term sent to search portals such as Google, Yahoo etc.
It can be used to prevent submission of searches for the same web content as are controlled by the
Web Filter Category settings. The primary use of this setting is to prevent search engines showing
cached content or images on behalf of the site they link to.
Example:
The Web Filter categories are set to block the Gambling category. If this tickbox is checked, then a
search to Google for the keyword Gambling will display the block page.
WEB REPUTATION SERVICE
The TrustedSource™ Web filter service includes a new web reputation service. This service assigns
each known web page a reputation score (similar to a credit rating) that represents the level of risk at
which you are placing your network, computers, and personal information by visiting the page.
The reputation score is determined by many different security attributes of each web page. The security
attributes include the URL’s content, where the URL shows up on the Internet, the URL’s domain
behavior, and more.
Reputation scores are assigned one of the following ratings:
• Inactive. A web page is inactive if it is not known to the Web Reputation service.
• Trusted. A web page belongs to a legitimate, secured web server with no malicious content or risk
of such content.
• Neutral. A web page most likely belongs to a legitimate web server, but all content still requires
some attention.
• Unverified. A webpage may belong to a legitimate web server but displays a few properties,
suggesting further inspection is necessary. This is the default setting for a new web filter profile.
• Suspicious. A web page shows many characteristics that are associated with a malicious web
server and any content from it requires special scrutiny.