FAQ Security Essentials Option

Your questions.
We answer.

Frequently asked questions about the LANCOM Security Essentials Option

The LANCOM Security Essentials Option provides an effective solution that protects networks from abuse, prevents the inappropriate use of bandwidth, and blocks malware downloads. Blocking undesirable and illegal Internet content protects business integrity and it minimizes liability risks at the same time.

Note: The LANCOM Security Essentials Option is available as an upgrade for LANCOM SD-WAN Gateways, SD-WAN Central Site Gateways, and WLAN controllers as the successor product to the LANCOM Content Filter and LANCOM BPjM Filter. The upcoming firmware version LCOS 10.92 is required to operate the software version.

General questions

How does the LANCOM Security Essentials Option function?

The LANCOM Security Essentials Option uses an internal HTTP proxy to intercept URL requests and forward these to an external rating server at IBM. The rating server then returns a category for this URL and, depending on how the router's content filter is configured, access to the URL will be allowed or blocked.

 

How are URLs categorized?

In addition to automated search algorithms, every URL reported as “unknown” by the LANCOM Security Essentials option is automatically subjected to further analysis. This process requires that the website can be automatically categorized, meaning it must contain sufficient content (such as text,…

In addition to automated search algorithms, every URL reported as “unknown” by the LANCOM Security Essentials option is automatically subjected to further analysis. This process requires that the website can be automatically categorized, meaning it must contain sufficient content (such as text, images, or links) to allow for clear classification. Thanks to the integrated BPjM filter, the option also includes the official website list maintained by the "Bundeszentrale für Kinder- und Jugendmedienschutz" (Federal Review Board for Media Harmful to Minors). This list contains content officially classified as harmful to minors and is continuously updated and expanded.

 

Is the LANCOM Security Essentials Option able to filter HTTPS requests?

Yes. Nevertheless, the message displayed for blocked content can vary regarding the web browser and is also different from the message displayed by the HTTP request.

Does the LANCOM Security Essentials Option have an internal cache?

The LANCOM Security Essentials Option has an internal cache as a buffer memory for the category assigned to a URL. The size of the cache depends on the device. The memory capacity can be displayed in LANmonitor.

 

Which devices are compatible with the LANCOM Security Essentials Option?

You can find a list with all LANCOM supported devices on the product web site.

 

Is it possible to get around the LANCOM Security Essentials Option by entering IP addresses or using host lists?

No, because the LANCOM Security Essentials Option does not work with DNS. Instead, it checks the target of the HTTP request, irrespective of whether this is determined from the name or the IP address.

How many categories does the LANCOM Security Essentials Option support?

The LANCOM Security Essentials Option supports 72 categories, which are divided into 12 subject groups.

 


Licensing & Operation

How does the licensing work for the LANCOM Security Essentials Option?

The licensing is for an unlimited number of users and is limited in throughput only by the respective hardware. A list of the recommended number of users per LANCOM device can be found on the product website.

How do I extend the license period for the LANCOM Security Essentials Option??

A current LANCOM Security Essentials option can be extended at any time during its term. The new term is calculated by adding 1, 3, or 5 years to the previous expiration date.

Does the LANCOM Security Essentials Option provide statistics?

The LANCOM Security Essentials Option offers an extensive range of statistics, including Top-10 lists of allowed, blocked and override URLs, counters and category listings in a configurable time frame.

 

Is there a demo option to test the LANCOM Security Essentials Option?

Yes. Follow the link to download a demo license and test the Content Filter before purchase. Please have the registration number of your LANCOM device ready: Demo licenses.

 


Customization options

What is the LANCOM override and how does it work?

If enabled, the LANCOM override grants access to websites even if they are blocked. This enables access to blocked URLs for a limited period of time without having to make changes to the configuration. The LANCOM override can be activated for each category. Overrides can be logged by e-mail, syslog and SNMP.

Can pages be allowed or forbidden manually?

Yes, the LANCOM Security Essentials option allows you to configure your own exceptions to the database-based categorization via blacklists and whitelists.

 

Can I integrate the BPjM list of content harmful to minors?

Yes, the official BPjM website list of domains with content harmful to minors from the "Bundeszentrale für Kinder- und Jugendmedienschutz" (Federal Review Board for Media Harmful to Minors) is already included in the LANCOM Security Essentials Option. The list of websites is constantly checked, expanded and updated by the Federal Review Board. This allows you to reliably maximize the protection of adolescents, e.g. in schools or youth facilities.

 

Is it possible to create configurations that are time- or user based?

The LANCOM Security Essentials Option supports time-dependent configurations for the various blocking lists (e. g. working hours vs. free time). A user-based configuration can be set up with firewall mechanisms.

 

Can I use my own blocking pages?

Along with the default blocking page stored in the device, which allows the displayed text to be edited and displayed in the language set in the browser, there is additionally the option of defining your own pages which can be stored on an external web server. This page can be referenced from the configuration in the Content Filter.

 

What kind of information does the database contain, and how are web pages classified?

Domain

www.domainnameindatabase.com

Host

www.domainnameindatabase.com gegenüber images.domainnameindatabase.com

Directory

www.domainnameindatabase.com/pics/

HTML page

www.domainnameindatabase.com/pics/001.jpg

IP adress

194.12.2.3

The information stored in the database mainly consists of the URLs and the category associated with each one. Every URL in the database is given one or more pre-defined categories. The database is also capable of categorizing subpages on websites (e.g. www.this.com/media as opposed to www.this.com/erotic) and also multiple hosts for a given domain (games.appsforyou.com as opposed to finance.appsforyou.com).

Categories

Illegal

  • Software piracy
  • Hate, violence, racsim
  • Suicide support/advocating:
  • Illegal narcotics
  • Illegal activites
  • Illegal (general)

Cyberthreats

  • Fraudulent websites
  • Web proxies
  • File sharing
  • Hacking
  • Command & Control server
  • Homographs
  • Malware
  • Probable malware
  • Phishing
  • Crypto miner
  • Spam
  • Unwanted websites
  • Untrusted websites

Pornography

  • Pornography
  • Sex toys
  • Sexual content
  • Nudity
  • Lingerie
  • Sexual education

Advertising

  • Advertising

Games

  • Games
  • Gambling

Web applications

  • Radio, music
  • Videos
  • Hosting
  • Computer & software
  • Social networks
  • Online dating
  • Job search
  • Online news portal
  • Search engines
  • Web mail
  • Blogs
  • Instant messaging
  • Online photos

Shopping

  • Online shops
  • Real estate

Finance

  • Online pay
  • Finance

Religions & occult

  • Religion
  • Occult
  • Astrology

Informations

  • Society
  • Education
  • Goverment
  • Health
  • Forums (Reddit etc.)
  • News
  • Business

Entertainment & Culture

  • Food
  • Kids
  • Pets
  • Motor vehicles
  • Lifestyle
  • Entertainment
  • Time wasters
  • Alcohol
  • Tobacco
  • Marijuana
  • Travel
  • Sports
  • Hobbies
  • Tabloids
  • Weapon

Miscellaneous

  • Miscellaneous
  • Uncategorized
  • Pharmacy

You have another question?

Then feel free to use our contact form to clarify any open questions or give us a call. We will be pleased if we can help you further.


We answer your questions

Your direct line to us

Most questions can be resolved best in direct contact.

We look forward to answering your questions and requests by phone or via the contact form.

Inside Sales International Team
+49 (0)2405 49936 122