Sophos Web网关配置指南

Sophos web网关配置指南

目录

出厂初始设置 (1)

1 Accounts 选项 (2)

2 Group Poblic (3)

3 Globle Policy (12)

4 System (14)

5 Network (18)

出厂初始设置

分为五大类说明:Accounts 、Group Poblicy 、Global Policy 、Syetem 、Network

1 Accounts 选项

这里创建管理系统和允许登录系统的用户

系统警告通知邮件地址的设置

2 Group Poblic

设备黑白名单，可以手动去添加

关联内部的域用户和分组，默认会自动同步。

这里设备的允许的白名单∙

∙10.48.7.23

Globally allowed sites

Business

Trusted

∙202.104.141.222

Globally allowed sites

∙211.139.200.199

Globally allowed sites

Motor Vehicles Trusted

∙ Globally blocked sites

∙ Globally allowed sites

Finance & Investment Trusted

∙

Globally allowed sites

Finance & Investment Trusted

∙

Globally allowed sites

Streaming Media Trusted

∙

Globally allowed sites Trusted

∙

Globally allowed sites

Business

Trusted

∙

Globally allowed sites

Business

Trusted

∙

Globally allowed sites

Government

Trusted

∙

Globally allowed sites

Finance & Investment

Trusted

∙

Globally allowed sites

Finance & Investment

Trusted

∙

Web-based E-mail

Trusted

∙

Web-based E-mail

Trusted

∙

Globally allowed sites

∙

Globally allowed sites

Trusted

∙

Globally allowed sites

Job Search & Career Development

Trusted

∙

Globally blocked sites

Streaming Media

High

∙/icbc/

Globally allowed sites

Finance & Investment

Trusted

∙

Globally allowed sites

Search Engines

Trusted

∙

Globally blocked sites

也可以设置URL 网站的地址

3 Globle Policy

开启相关的安全过滤条件

动态分类开启

添加扫描的网站地址

下载默认可执行的扫描

默认系统缓存大小4 System

系统的更新版本时间

本地的域名

管理AD 域设置

设备关联AD 域

时区/默认选择亚洲/上海

输入管理相连接的设备名称

证书默认选择SOPHOS系统证书

端点网络控制，打开就可以

5 Network

本地的网络地址下，设置

设备的主机名称，DNS 服务器的地址（可选），发送SMTP邮件服务器地址(可选)，通知的，发射器发送的邮件地址

利用WCCP协议与缓存服务器对话，判断这台路由器应该拦截什么类型的通信并且通过一个GRE隧道重新引导缓存

测试网络的连通性

利用ping 工具来判断网络是否正常