Web Control manages user access to web resources. This helps reduce traffic and inappropriate use of work time. When a user tries to open a website that is restricted by Web Control, Kaspersky Endpoint Security blocks access or shows a warning.
Website access rules
Web Control manages users' access to websites by using access rules. You can configure access to websites for the following scan areas:
Website category. Websites are categorized according to the Kaspersky Security Network cloud service, heuristic analysis, and the database of known websites (included in application databases). You can restrict user access to certain categories, for example, the Social networks category or other categories.
WindowsData type. You can restrict user access to data on a website, and hide images, for example. Kaspersky Endpoint Security determines the data type based on the file format and not based on its extension.
Kaspersky Endpoint Security does not scan files within archives. For example, if image files were placed in an archive, Kaspersky Endpoint Security identifies the Archives data type and not Graphic files.
Individual address. You can enter a web address or use masks.
You can simultaneously use multiple methods for regulating access to websites. For example, you can restrict access to the Office files data type just for the Web-based email website category.
Web Control also lets you configure the following advanced settings for website access rules:
User or group to which the Application Control rule applies.
For example, you can restrict Internet access through a browser for all users of the company except the IT department.
Device Access schedule.
For example, you can restrict Internet access through a browser during working hours only.
Web Control settings for Pro View
Settings
OS
Description
Default action
Windows
Linux
The access rule for web resources that are not covered by any other rule. The following options are available:
Allow all except the rules list.
Block all except the rules list.
Rules list
Windows
Linux
List containing web resource access rules. Each rule has a priority. The higher a rule is on the list, the higher its priority. If a website has been added to multiple rules, Web Control regulates access to the website based on the rule with the highest priority.
User message template
Windows
Linux
The entry field contains the template of the message that appears if a rule that blocks access to a web resource is triggered.
Special variables are provided for managing the message templates (for example, %USER_NAME%). Variables allow a single message template to be used for different computers.
You can use the following variables in user message templates or administrator message templates:
User – %USER_NAME%.
Name of the current user account on the computer on which the message was generated, in the <device name>\<user alias> format (for example, DESKTOP-123\John.Smith).
Web resource address – %CANONIC_REQUEST_URL%.
Address of the blocked web resource.
Rule name – %RULE%.
Name of the rule that blocked the web resource.
Email for sending a message – %COMPLAIN_EMAIL%.
Email address for feedback about web resource blocks. Clicking the email address opens a window in which the user can write a message to the administrator.
Name of content category – %CONTENT_CATEGORY_LIST%.
Website category to which the blocked resource belongs (for example, Payment systems).
Name of data type category – %TYPE_CATEGORY_LIST%.
Category of data type on the blocked web resource (for example, Graphic files).
Link to requested web resource – %CONTINUE_PAGE%.
Link to the requested web page (for example, http://www.example.com/pagename.html).
Link to website – %CONTINUE_SITE%.
Link to the website that contains the requested web page (for example, http://www.example.com/).
Link for access to domains – %CONTINUE_DOMAIN%.
Link that can be clicked to gain access to all existing web pages of the domain name. For example, if the address of the blocked web page is http://www.example.com, the %CONTINUE_DOMAIN% variable is replaces with the http://*.example.com link. Clicking this link allows access to all web addresses of the base domain name http://www.example.com/ including subdomains, for example, http://start.example.com/* or http://domain.domain.example.com/*, where the * character stands for any sequence of characters (including an empty string).