Frequently asked questions about the LANCOM Security Essentials Option
The LANCOM Security Essentials Option provides an effective solution that protects networks from abuse, prevents the inappropriate use of bandwidth, and blocks malware downloads. Blocking undesirable and illegal Internet content protects business integrity and it minimizes liability risks at the same time.
Note: The LANCOM Security Essentials Option is available as an upgrade for LANCOM SD-WAN Gateways, SD-WAN Central Site Gateways, and WLAN controllers as the successor product to the LANCOM Content Filter and LANCOM BPjM Filter. The upcoming firmware version LCOS 10.92 is required to operate the software version.
How does the LANCOM Security Essentials Option function?
The LANCOM Security Essentials Option uses an internal HTTP proxy to intercept URL requests and forward these to an external rating server at IBM. The rating server then returns a category for this URL and, depending on how the router's content filter is configured, access to the URL will be allowed or blocked.
How are URLs categorized?
In addition to automated search algorithms, every URL reported as “unknown” by the LANCOM Security Essentials option is automatically subjected to further analysis. This process requires that the website can be automatically categorized, meaning it must contain sufficient content (such as text,…
Which devices are compatible with the LANCOM Security Essentials Option?
You can find a list with all LANCOM supported devices on the product web site.
Is it possible to get around the LANCOM Security Essentials Option by entering IP addresses or using host lists?
No, because the LANCOM Security Essentials Option does not work with DNS. Instead, it checks the target of the HTTP request, irrespective of whether this is determined from the name or the IP address.
How does the licensing work for the LANCOM Security Essentials Option?
The licensing is for an unlimited number of users and is limited in throughput only by the respective hardware. A list of the recommended number of users per LANCOM device can be found on the product website.
Is there a demo option to test the LANCOM Security Essentials Option?
Yes. Follow the link to download a demo license and test the Content Filter before purchase. Please have the registration number of your LANCOM device ready: Demo licenses.
What is the LANCOM override and how does it work?
If enabled, the LANCOM override grants access to websites even if they are blocked. This enables access to blocked URLs for a limited period of time without having to make changes to the configuration. The LANCOM override can be activated for each category. Overrides can be logged by e-mail, syslog and SNMP.
Can I integrate the BPjM list of content harmful to minors?
Yes, the official BPjM website list of domains with content harmful to minors from the "Bundeszentrale für Kinder- und Jugendmedienschutz" (Federal Review Board for Media Harmful to Minors) is already included in the LANCOM Security Essentials Option. The list of websites is constantly checked, expanded and updated by the Federal Review Board. This allows you to reliably maximize the protection of adolescents, e.g. in schools or youth facilities.
Can I use my own blocking pages?
Along with the default blocking page stored in the device, which allows the displayed text to be edited and displayed in the language set in the browser, there is additionally the option of defining your own pages which can be stored on an external web server. This page can be referenced from the configuration in the Content Filter.
What kind of information does the database contain, and how are web pages classified?
Domain |
www.domainnameindatabase.com |
Host |
www.domainnameindatabase.com gegenüber images.domainnameindatabase.com |
Directory |
www.domainnameindatabase.com/pics/ |
HTML page |
www.domainnameindatabase.com/pics/001.jpg |
IP adress |
194.12.2.3 |
The information stored in the database mainly consists of the URLs and the category associated with each one. Every URL in the database is given one or more pre-defined categories. The database is also capable of categorizing subpages on websites (e.g. www.this.com/media as opposed to www.this.com/erotic) and also multiple hosts for a given domain (games.appsforyou.com as opposed to finance.appsforyou.com).