|General Settings Video|
Click here to watch a video tutorial about configuring General settings.
- Decode SSL Certificates – Through various methods, including (among others) decoding of SSL Certificates and SNI extension to TLS, the Lightspeed Systems Rocket can determine the site that a user is attempting to visit through SSL. The Lightspeed Systems Rocket looks up the host in the database, and applies the appropriate policies.
Because of the nature of SSL traffic, the Lightspeed Systems Rocket does not display the Access Page when blocking an HTTPS session.
A detailed technical discussion of SSL is outside the scope of this document. For technical information on SSL and related security topics, refer to the Wikipedia article on Transport Layer Security at http://en.wikipedia.org/wiki/Transport_Layer_Security.
- Bypass on failure – This setting controls how the Lightspeed Systems Rocket should handle traffic in the event of hardware or software failure, or power loss. Select (check) this check box to allow unfiltered traffic to pass through the network interfaces. Unselect (uncheck) to block all traffic and disable all Internet access.
- Block P2P networks – Peer to Peer (P2P) protocols such as BitTorrent and Skype can use up large amounts of bandwidth. They can also be a source of unwanted content such as viruses, trojans, inappropriate or infringing downloads. Select (check) this check box to block all unidentified UDP traffic. Enabling this option will block Skype, UltraSurf type traffic, and file-sharing networks such as BitTorrent.
Possible overblocking with the Block P2P networks option.
Enabling the Block P2P networks option could cause overblocking. Therefore, to prevent this, Lightspeed Systems recommends that you use internal and external ignore rules to allow specific traffic.
- Block proxied requests – Users often attempt to bypass content filters by connecting to a proxy server, which disguises or encrypts traffic to escape detection. The Lightspeed Systems Rocket uses advanced proxy detection and traffic analysis to block known and unknown proxy servers. Select (check) this check box to block proxy server connections.
- Disable Google encrypted search - Select this option to disallow access to Google's encrypted search page, and redirect users to non-encrypted searches.
- Secure access page – Check (select) this option to force HTTPS when redirecting web requests to the access page.
- YouTube for Schools Code - If your school is a member of YouTube's EDU portal, enter your YouTube EDU code here.
YouTube EDU Codes
Please refer to Google's YouTube EDU help page for more information.
As described in Rule Sets you can allow users to submit blocked sites for administrative review. To enable this option, you need to specify one or more destination email addresses for the review request messages. This should be the email address of a user with sufficient access to visit blocked web sites to determine the validity of the review request.
Enter the email addresses for your content reviewers in this field. Use commas to separate multiple email addresses.