Requirements for Web Protection
Web Protection does not support IPv6.
Supported Operating System
Web Protection supports Windows only. For the list of supported Windows operating systems for Web Protection, see Supported Operating Systems: Windows.
User Roles and Permissions determine what a user role can do with Web Protection. They determine if you can configure settings and Protection Policies, use Web Protection data, or view the data only. To setup Web Protection, you require a user role of Superuser or Administrator (non-classic), or a user role with the required Web Protection permissions enabled, or you could use the Agent Key (if Dashboard access is enabled).
Web Protection URLs
In addition to the Dashboard URLs and Agent Communication URLs, the Web Protection engine on each device requires access to the following URLs over ports 80 and 443. To ensure Web Protection can communicate with our servers, we recommend you allow these URLs in your firewall software.
Deep Packet Inspection
The network’s firewall or Virtual Private Network (VPN) may incorporate Deep Packet Inspection (DPI), an intelligent firewalling feature designed to examine all network traffic (including SSL) that passes through the firewall.
DPI examines all elements of these data packets and depending on the aggressiveness of this inspection, it may potentially interfere with the operation and performance of our Agent and associated modules by blocking of delaying communication with our systems.
To avoid DPI interfering with our systems, we recommend you add a rule to exclude or disable DPI for our traffic (where DPI is enabled on the firewall).
These configuration settings vary from vendor to vendor and are documented in their support material.
Web Protection and Packet Inspection
Despite the duplicate inspection of each packet, the use of two packet inspectors (including Web Protection) on the same network should not significantly impact on performance if the inspectors use different drivers.
However, conflicts will occur if both inspectors attempt to use the same driver to examine the packets. Due to the potential performance issues, we recommend you disable Web Protection on networks where the DPI component leverages the same driver as Web Protection.
France (FR) France1