This page describes general guidelines to configure the network and system to enforce Symantec Web Security usage.
To ensure clients on your network use Symantec Web Security go the following sections starting with the first. Skip any section that does not apply.
To lock the Preferences Settings in Microsoft® Internet Explorer 3.x/4.x/5.x/6.x for Windows 9x
To lock the Preference Settings in Netscape 3.x/4.x for Windows®
General guidelines Do not enforce all blocks using the IP address of the Symantec Web Security server. Consider blocking traffic at your firewall or router. Some suggestions:
Block all outbound traffic destined for port 80 and port 443 from your network. This blocks most web and SSL encrypted web traffic.
Block all outbound traffic bound for port 21 on the external Internet. This blocks most FTP traffic. Note: SWS cannot scan nonbrowser-based FTP.
Block all outbound traffic bound for port 1080, the default Socks port for most external proxy servers.
Block all outbound traffic bound for ports 22 and 23, potential SSH encrypted servers. SSH or secure shell can be used to encapsulate proxy traffic in a secure "tunnel" through your network.
Browser configuration Externally configure browsers to prevent users from modifying settings by locking the browsers. Use the appropriate section:
To lock the Preferences Settings in Microsoft Internet Explorer 3.x/4.x/5.x/6.x for Windows 9x
Exit all open programs.
Click Start > Shutdown.
Select Restart in MS-DOS mode, and then click OK. The computer restarts in MS-DOS mode.
Type the following command, then press Enter: cd\windows\system
Type the following command to rename the file and then press Enter: ren inetcpl.cpl inetcpl.old
Type Exit, and then press Enter. Windows restarts. Notes:
To unlock the Preference Settings in Microsoft Internet Explorer 3.x/4.x/5.x for Windows, repeat the previous steps, except rename the file from inetcpl.old back to inetcpl.cpl.
Roll out the browser settings for Windows NT/2000 through policies.
Internet Explorer v5.0 and newer does not support connections through a web proxy in FTP Folder view. For additional information, read the Microsoft Knowledge Base Article - 217888 How to Install and Use FTP Folders
If you are running Windows 3.x, the location of the Netscape\Program folder may be different. For newer versions of Netscape, consult the installation documentation on configuration of Preference settings.
Rename the file PrefUI32.dll to PrefUI32.old. This makes the Preference setting under the Edit menu unavailable.
For Windows 3.x rename PrefUI16.dll to PrefUI16.old
To unlock the Preference settings, rename the PrefUIxx.old to the original name.
Imported Document Id
This is machine translated content
Login to Subscribe
Please login to set up your subscription.
Didn't find the article you were looking for? Try these resources.