Skip to content Skip to main navigation Skip to footer
Wavecrest Knowledge Base

Administration

Windows Update through the proxy

Category: Administration

If updates fail to run through the proxy, you will need to manually set proxy settings for Windows Update. Additionally, it may be necessary to bypass authentication for certain URLs in order for the updates to pass.

Setting Proxy Configuration for Windows Updates

  1. You can import proxy settings from Internet Explorer by opening a command prompt and entering the following:
    • netsh winhttp import proxy
  2. Additionally, you can manually set the proxy by opening a command prompt and entering the following:
    • netsh winhttp set proxy <Proxy Server>:<Port> “<Exclusion List>”

Bypassing Authentication for Windows Updates

  1. In the CyBlock interface, go to User Management – Authentication and click the Bypass tab.
  2. Add new bypass entries by clicking the green green button button.
  3. Create two separate entries using the following configurations (with asterisks as wildcards).
    • URL or Domain: *.microsoft.com             |  User-Agent: *
    • URL or Domain: *.windowsupdate.com   |  User-Agent: *

Users prompted to enter credentials when accessing specific sites

Category: Administration

To stop users from receiving authentication prompts for specific sites, you can bypass authentication for these sites in the Authentication Manager.

  1. In the interface, go to User Management – Authentication and click the Bypass tab.
  2. Click the green green button button to add a new bypass entry.
  3. Enter the URL in question. You can use asterisks (*) as wildcards.
  4. For User-Agent, enter an asterisk (*).
  5. Click Add.

 

 

A previously working internal site is now unreachable

Category: Administration

This may be a DNS issue. CyBlock keeps DNS information for 24 hours before refreshing its cache. If the name or IP of the site has changed within the last 24 hours, users may not be able to reach the page until the cache refreshes.

If this is the case, the immediate solution would be to restart the CyBlock service, which will cause the cache to refresh.

Web site not loading correctly through the proxy

Category: Administration

When going through the proxy, a user may experience issues with a Web page loading incorrectly. The problems may manifest in various ways, such as:

  • The page is blank.
  • The page shows multiple red x’s throughout.
  • The page is improperly formatted and mostly (or only) text.

Below are two methods to try to get the page to appear properly.

  1. Embedded content may be blocked by the Banners and Ads category.
    • Unblock the Banners and Ads category and refresh the browser.
  2. The Web site has been explicitly allowed, but content delivery domains (CDNs) are still being blocked.
    • To determine if a content domain is being blocked, use the Real-Time Monitor (RTM).
    • In the CyBlock interface, go to Real-Time Monitors – Web.
    • Remove “Enterprise” from the Groups field. In the IDs field, add only the user who will be testing the Web page.
    • Click Start Monitor.
    • Attempt to reload the page and watch the RTM for any URLs that appear in red.
    • Add these URLs to an allowed category (Categorization – Customize – URLs).
    • Reload the page.

If the above options do not fix the issue, please contact Technical Support at (321) 953-5351, Ext.4 or support@wavecrest.net.

 

How to set up a captive portal

Category: Administration, Authentication Manager

For CyBlock customers, captive portal is available as an alternative to NTLM authentication in CyBlock Software, CyBlock Appliance, and CyBlock Cloud (version 9.1.0). Captive portal requires an account for each user who wants to access the Internet through your network. When a user tries to access a Web site, a browser cookie authentication logon page is displayed that will allow users to create an account or reset their password if forgotten. When entering their credentials, you can require users to agree to the company’s AUP before continuing on.

The steps to set up a captive portal are highlighted below. Be sure to check out the product Help or manual for detailed instructions.

  1. Set up your rules for proxy authentication. Go to User Management – Authentication.

userManagementAuthenticationRules

Note:  The Bypass and Cache tabs are available in CyBlock Software and CyBlock Appliance only.

  1. Define how long the cookie will persist, and specify and preview the details of your cookie authentication logon page. Go to User Management – Authentication and click the Cookie tab.

userManagementAuthenticationCookie

Note:  In CyBlock Appliance and CyBlock Cloud, this tab will be displayed differently.

  1. Ensure that users have an e-mail address entered in Groups and IDs. Go to User Management – Edit Users – Modify.

userManagementEditUsersModify

  1. Set up users’ browsers to allow local addresses to go through the proxy, that is, to not bypass the proxy server.
    • In Internet Explorer, go to Tools – Internet options and click the Connections tab.
    • Click LAN settings.
    • Under Proxy server, ensure that the “Bypass proxy server for local addresses” check box is not selected.
  2. Access a Web site, and the cookie authentication logon page will appear allowing you to create an account.
  3. After creating your account, enter your new password, and you will be redirected to the Web site that you were trying to access.

For additional assistance, please contact Technical Support at (321) 953-5351, Ext. 4 or support@wavecrest.net.

Using the Cyfin Syslog Server

Category: Administration, Log File Compatibility, Reporting

This information applies to version 9.3.0 and later.

Our Cyfin product allows you to send syslog data to the Cyfin Syslog Server that can then be read by Cyfin. Customers no longer have to install and configure a syslog daemon. You will need to configure your gateway device to direct syslog output to the Cyfin Syslog Server at a configured port.

  1. Go to Data Management – Log Data Source – Setup to create or modify your syslog log file configuration.
  2. Choose from the following:
    • Astaro Security
    • Barracuda Networks
    • Bloxx Proxy
    • Check Point Syslog
    • EdgeWave iPrism
    • FortiGate
    • McAfee Web Gateway Syslog
    • NETGEAR
    • Palo Alto Firewall
    • SonicWall Security Appliance
    • Sophos
    • WatchGuard Syslog
  1. Select Enable Syslog Server, select the port type, and enter a listening port number. The Syslog Filter field is prepopulated with the default value format based on your syslog configuration. It is used to log only the pertinent data into the syslog and not all the data that is being sent.

  1. Once the Cyfin Syslog Server receives data, it will confirm success at parsing the syslog data based on the selected log file type. If there is an issue with the log file validation, your data can be sent to Technical Support for resolution.

For additional assistance, please contact Technical Support at (321) 953-5351, Ext. 4 or support@wavecrest.net.

Additional Resources:

Activating Cyfin Proxy

Category: Administration

These instructions are for renewing Cyfin Proxy customers.

  1. Log on to Cyfin Proxy.
  2. Go to Setup – License.
  3. In the Serial Number field, enter the number found in the Cyfin Subscription Activation Key Certificate in your e-mail.
  4. In the Activation Key field, enter the Activation Key also found in the Certificate.
  5. Click the Submit button to save the changes.

Activating CyBlock ISA/TMG

Category: Administration

These instructions are for new and renewing CyBlock ISA/TMG customers.

  1. For new customers: To activate CyBlock ISA/TMG, you have two options to get started:
    • Log on to your CyBlock ISA/TMG evaluation copy.
    • Install a new version of CyBlock ISA/TMG (if you want the product located on a different server) and log on using the default logon and password listed below.
      • Logon – admin
      • Password – password
  2. For renewing customers: Log on to CyBlock ISA/TMG.
  3. Go to Setup – License.
  4. In the Serial Number field, enter the number found in the CyBlock Subscription Activation Key Certificate in your e-mail.
  5. In the Activation Key field, enter the Activation Key also found in the Certificate.
  6. Click the Submit button to save the changes.

Downloading the product

Category: Administration

Follow these instructions to check for new product versions and download the latest release.

  1. Go to the product update screen.
    • For CyBlock/Cyfin 9.0.5 and later: Go to Help – Check for Updates.
    • For CyBlock 6.8.3a/Cyfin 8.8.3a and earlier: Go to Administration – Product Update.
  2. The Status message will let you know if there are any new updates or if your product is currently up to date.
  3. If updates are available:
    • For CyBlock/Cyfin 9.0.5 and later: Click Update Now to upgrade the product.
    • For CyBlock 6.8.3a/Cyfin 8.8.3a and earlier: Click Download Now to upgrade the product.