Skip to content Skip to main navigation Skip to footer

Administration

Upgrading and moving the product from an old to a new server

When attempting to move an older version of the product to a new server, perform the following steps:

  1. Upgrade your current installation to the latest 6.x.x or 8.x.x release (6.8.3a or 8.8.3a).
  2. Download the latest release version of the product from the Download page of our Web site www.wavecrest.net.
  3. Run the installation package on your current installation to get to the latest release.
  4. In the new interface, create a restore point by going to the Settings – Restore Points – Download screen and clicking Create under Create Restore Point.
  5. Click the new restore point listed under Choose Restore Point to Download.
  6. Download and install the latest version of the product on the new server.
  7. Copy the restore point file to …\wc\[cf|cyblock]\db\restore.
  8. Go to the Settings – Restore Points – Manage screen, and select the correct date of the file to restore.
  9. Select the Configuration Only option, and click Submit.

After the configurations have been restored, you should now have replicated your old installation configuration onto your new server.

If you have any questions or issues, please contact Technical Support at (321) 953-5351, Ext. 4 or support@wavecrest.net.

Using the PAC file in the new UI

When upgrading an older version 6.x.x of CyBlock to the newer version 9.x.x, the path for the PAC file needs to be updated in the browser settings, if you are using the PAC file to filter Web traffic.

  1. For the automatic proxy configuration in the browser, use the following URL:

http://<IP of Proxy Server>:8080/proxy.pac

  1. Replace port 8080 if this is not your current proxy port.
  2. To view your current proxy port, go to the Settings – Proxy – PAC File screen. The full URL is displayed for your PAC file.

What are zero-byte visits in audit detail reports?

When viewing an audit detail report, the number of bytes received from the Internet in response to Web requests is shown in the Size column in the Audit Detail section of the report. It includes all content that was used to render the Web site, which is referred to as “payload,” but does not include the accompanying HTTP header information. HTTP headers contain information about the request or response that allows servers to provide the right data and browsers to render the content properly. Occasionally, servers can respond with only HTTP header information to inform the browser that there is no content, or redirect to a new URL for the content. These visits show in the audit detail report as zero bytes (0 B) in the Size column. While there is no payload for these requests, they are valid entries in the report because the browser requested the data and received a valid HTTP response.

If you have any questions, please contact Technical Support at (321) 953-5351, Ext. 4 or support@wavecrest.net.

Filtering with allow and block lists in CyBlock

In the past, custom categories may have been used to control user’s Web activity by adding URLs to those categories to serve as white lists or black lists. This process changes the category of the URLs in custom categories and is no longer necessary with the white list/black list feature in CyBlock. The white list/black list feature allows you to create a white list as well as a black list in the same Web category policy. You may enter and save both allowed and blocked URLs in the policy without affecting the categorization of the URLs.

White lists and black lists allow you to create exceptions to your blocking policy. A white list can be used to allow access to specific sites while blocking all others in the corresponding category. A black list can be used to block access to specific sites while allowing all others in the corresponding category. For example, if you blocked the Search Engines category, but you wanted to allow access to Google, then you would type *.google.com in the Allowed URLs box to allow access to that Web site.

  1. Go to Web Management – Filter – Categories.
  2. Select the policy to which you want to add a white list and/or a black list.
  3. In the Allowed URLs box, enter the URLs you want to allow.
  4. In the Blocked URLs box, enter the URLs you want to block.
  5. Click Submit to apply your changes.

Your users’ Web traffic will now be filtered according to the URLs in your white and black lists.

If you need assistance, please contact Technical Support at (321) 953-5351, Ext. 4 or support@wavecrest.net.

Setting up the Wavecrest certificate for cloud users

If you are a CyBlock Cloud customer, you probably want to allow your cloud users to access secure sites (https://) and need to inspect this HTTPS traffic to ensure that your network is protected from Web threats and to enforce your AUP. The SSL Inspection feature in CyBlock Cloud allows you to inspect this HTTPS activity, but requires that you install the Wavecrest root certificate on your cloud users’ browsers. If the Wavecrest root certificate is not installed in the browser, a certificate warning message will be issued that must be accepted in order to display your blocking message.

Another reason to install the Wavecrest root certificate is if using cookie authentication to confirm the identity of users accessing the Internet through your network. The cookie authentication logon page that is presented to your users is a secure page and is automatically inspected. Therefore, to avoid your users receiving a certificate error, install the certificate on your users’ browsers.

The certificate may be installed in the following ways:

  • Through the browser
  • Using Active Directory GPO
  • Using Microsoft Management Console

The Wavecrest Certificate Installation Guide provides instructions on installing the certificate using Internet Explorer/Google Chrome and Firefox, importing it using Active Directory, and installing it in Windows 7 Professional/Enterprise.

If you need assistance, please contact Technical Support at (321) 953-5351, Ext. 4 or support@wavecrest.net.

How to troubleshoot Web sites that do not authenticate

This applies to CyBlock Software, CyBlock Appliance, and CyBlock Cloud.

If you have troublesome Web applications that fail to authenticate, you can turn off authentication for that specific IP address to determine if it is an authentication problem.

  1. Go to User Management – Authentication.
  2. On the Rules tab, create a rule as follows:
    • For the network definition, select IP Address/Subnet.
    • For the type of authentication, select Disabled.
    • Enter the IP address of the computer that is experiencing an issue.
    • Add the rule.
  3. Try to access the site again.

If the test is successful, that is, you are able to get to the site, the problem is authentication, and you can add the URL to the Bypassed list in the Authentication Manager.

If the test is unsuccessful, the issue is not authentication, but proxying/filtering. Contact Technical Support for assistance.

For CyBlock Cloud, customers will need to contact Technical Support to have troublesome URLs added to the Bypassed list.

 

See also:

Converting older scheduled reports to the new UI

This applies to CyBlock Software and Cyfin.

When upgrading an older version 6.x.x/8.x.x of the product to the newer version 9.x.x, scheduled reports may not convert to the new user interface in some cases. Customers should send their …\wc\[cf|cyblock]\db\sched folder to Technical Support.

To upgrade to the latest version, please contact Technical Support at (321) 953-5351, Ext. 4 or support@wavecrest.net.

What is CyBlock Directory Agent?

For CyBlock Cloud customers, CyBlock Directory Agent is a directory synchronization tool that bridges the gap between your internal Active Directory (AD) and CyBlock Cloud service. It updates the user information required by the cloud service keeping the cloud service in sync with the local AD.

The highlights of how the Directory Agent works are as follows:

  • A CyBlock Cloud account is created for you with the Directory Agent module enabled.
  • You will receive an e-mail notification to complete your registration by logging on to the interface.
  • You install the Directory Agent on an appropriate computer that has internal network access to AD
    and external network access to the cloud service.
  • Once the Directory Agent is installed, you pair the installation with your cloud account.
  • You create an AD configuration to link to your internal AD. Multiple AD configurations may be created.
  • You import users and groups from AD manually or schedule a daily import.
  • The imported users and groups are synced with the cloud service.
  • You can view the imported users and groups to verify the grouping structure.
  • When AD configuration changes occur, they automatically sync with the cloud service.

Setting the character set for MySQL

The following instructions apply to CyBlock Software and Cyfin version 9.2.8 and later.

When creating a MySQL database from the Data Management – Report Database – Configuration – Settings screen, set the proper character set using the command-line MySQL client.

On the Required Database Setup page, for Option A, step 3, the command is “CREATE DATABASE superview CHARACTER SET latin1.”

Note:  Development of MySQL Query Browser has been discontinued, but MySQL Workbench is available.

How to exclude Web sites from reports with custom categories

This information applies to version 9.x.x.

There are times when you want to exclude Web sites from reports due to either their known traffic or any other reason. The following steps will accomplish this task:

  1. Create a custom category on the Categorization – Customize – URLs screen.
  2. Turn off the “Display Categories” setting for this new category on the Categorization – Customize – Categories screen.
  3. If you wish to exclude the category from past reporting, you must delete and reimport the Report Database data. Otherwise, only URLs from this point forward will be excluded. This process happens at the time of import.