Web Control

for Windows, macOS, and Linux

Web Control manages user access to web resources. This helps reduce traffic and inappropriate use of work time. When a user tries to open a website that is restricted by Web Control, Kaspersky Endpoint Security blocks access or shows a warning.

Website access rules

Web Control manages users' access to websites by using access rules. You can configure access to websites for the following scan areas:

• Website category. Websites are categorized according to the Kaspersky Security Network cloud service, heuristic analysis, and the database of known websites (included in application databases). You can restrict user access to certain categories, for example, the Social networks category or other categories.
• Windows Data type. You can restrict user access to data on a website, and hide images, for example. Kaspersky Endpoint Security determines the data type based on the file format and not based on its extension.

  Kaspersky Endpoint Security does not scan files within archives. For example, if image files were placed in an archive, Kaspersky Endpoint Security identifies the Archives data type and not Graphic files.

• Individual address. You can enter a web address or use masks.

You can simultaneously use multiple methods for regulating access to websites. For example, you can restrict access to the Office files data type just for the Web-based email website category.

Web Control also lets you configure the following advanced settings for website access rules:

• User or group to which the Application Control rule applies.

  For example, you can restrict Internet access through a browser for all users of the company except the IT department.

• Device Access schedule.

  For example, you can restrict Internet access through a browser during working hours only.

  Web Control settings

  Settings	OS	Description
  Message templates	Windows Linux	Warning. The entry field consists of a template of the message that is displayed if a rule for warning about attempts to access an unwanted web resource is triggered. Message about blocking. The entry field contains the template of the message that appears if a rule that blocks access to a web resource is triggered. Message to administrator. Template of the message to be sent to the administrator of the corporate local network. Used if the user believes that access to the web resource was blocked by mistake. Special variables are provided for managing the message templates (for example, %USER_NAME%). Variables allow a single message template to be used for different computers.
  Rules list	Windows macOS Linux	List containing web resource access rules. Each rule has a priority. The higher a rule is on the list, the higher its priority. If a website has been added to multiple rules, Web Control regulates access to the website based on the rule with the highest priority.
  Default action	Windows macOS Linux	The access rule for web resources that are not covered by any other rule. The following options are available: Allow all except the rules list. Block all except the rules list.
  Terminate active user browser sessions after the rule is applied	Windows	If the check box is selected, Web Control terminates the connection to blocked web resources immediately after the policy is applied. The browser immediately stops downloading data from the web page. When you refresh the web page or go to another prohibited web page, the application displays a warning. Web Control allows immediately disconnecting web resources only in web browsers. For other applications, Web Control only restricts new connections. If the check box is cleared, Web Control restricts only new connections to prohibited web resources. Web Control does not terminate active connections.
  Web session monitoring	Windows	Kaspersky Endpoint Security logs data on visits to all websites, including allowed websites. Kaspersky Endpoint Security sends events to Kaspersky Security Center, the Windows Event Log and a report. To monitor user internet activity, you need to configure the settings for saving events. Browsers that support the monitoring function: Microsoft Edge, Microsoft Internet Explorer, Google Chrome, Yandex Browser, Mozilla Firefox. User activity monitoring does not work in other browsers. Monitoring user Internet activity may require more computer resources when decrypting HTTPS traffic.

Page top