How to push web pages to network clients with Wfilter ?

In WFilter 4.1 version,a new feature named “web content pushing” is added. This feature enables you to push a web page to client devices at a time interval. You can define time interval, triggers for pushing and pushing pages.

In this example, I will guide you to use the “web content pushing”in WFilter 4.1.

1.Wfilter Settings

1.1New a blocking level

Add a “company broadcast” policy in “Policy Settings”->”Blocking Level Settings”. Check “Enable Web Content Pushing” and click “New”.

Add a new “web content pushing” named “broadcast”, in “Triggers”, input “www.baidu.com” which means this web pushing shall be triggered when baidu.com is visited.

In “Content”, you can put anything you want to broadcast. It will be displayed when triggered.

Apply this blocking policy to target ip ranges.

1.2 When an user visits baidu.com, the broadcast message will show up every ten minutes.

How to block DropBox with WFilter free?

From version 1.0.172, WFilter free is able to block dropbox on network. In this guide, I will demonstrate you to block dropbox with WFilter free edition.

1.Download dropbox protocol

2.New a “block dropbox” policy

New a “block dropbox” policy in “Policy Settings”->”Blocking Level Settings”.

3.Define ip ranges to be blocked

Apply the “block utorrent” policy to client ip ranges in “User-device List”.

4.Check dropbox program and website

Can’t connect to dropbox server and website.

How to block utorrent downloading with WFilter 4.1?

From version 4.1, WFilter is able to block bittorrent traffic on network. Various bittorrent clients are supported, including utorrent. In this guide, I will demonstrate you to block utorrent downloading with WFilter 4.1, Web Filter Software.

Please Notice: in pass-by filtering mode, you need to block udp ports 1024-65534 in your router or firewall for complete blocking of utorrent.

Below are the steps to block utorrent in WFilter, if you haven’t deployed WFilter successfully, please check “WFilter Deployment Guide”.

1.New a “block utorrent” policy

New a “block utorrent” policy in “Policy Settings”->”Blocking Level Settings”.

Define ip ranges to be blocked.

Apply the “block utorrent” policy to client ip ranges in “User-device List”.

3.Now utorrent downloading is blocked.

Utorrent download speed will be zero when blocked.

In WFilter’s blocking history logs, you will be able to see blocking events of utorrent .

A simple deployment of WFilter with wireless router

Usually, a manageable switch or router with “port mirroring” feature is required for correct WFilter deployment. In case you only have a wireless router which does not support “port mirroring”, you can try this solution, which is simple to deployment.

The point is to “configure the WFilter PC as your internet gateway and turn the wireless router into a wireless AP.”

The network topology diagram:

1.Configure the WFilter PC as internet gateway

The first step is to make the WFilter PC acting as your internet gateway. The WFilter PC shall have two network adapters, one for internet access( usually connected to an ADSL modem), another one for local subnet(shall be configured as “obtain ip address automatically).

We use Win7 in this example. And you’re supposed to have setup internet connection in one network adapter.

1.1 Sharing Internet to local subnet

Click “Sharing” in “Properties” of the adapter which is connected to internet in “Control Panel”->“Network and Internet”->“Network Connections”, and choose “Allow other network users to connect through this computer’s internet connection”. (Figure1)

Now, another adapter(“LAN Connection”) will be assigned the ip address 192.168.137.1 (It will be 192.168.0.1 in windows XP).

This 192.168.137.1 is the default gateway for local subnet devices to access internet. To make it work for wireless devices, you also need to modify your wireless router’s settings.

2. Turn your wireless router into a wireless AP

Because the WFilter PC is sharing its internet, we only need the wireless router to act as a wireless AP.

Please leave the WAN interface dis-connected, and connect the “LAN Connection” adapter of the WFilter PC to a LAN interface of your wireless router(Can be every LAN interface, usually connect to LAN1).

2.1 Modify Lan interface ip address

Assign ip address “192.168.137.2” to the lan interface. If the WFilter computer is windows XP, the ip address shall be “192.168.0.2”.

2.2 Disable DHCP service

Because the WFilter PC is serving DHCP, now you need to turn off the dhcp service of the wireless router to avoid conflicting.

3.WFiler

The last step is to configure the “LAN Connection” adapter as the monitoring adapter in “Monitoring Settings” of WFilter. And you’re able to monitor and filter local network users.

How to scan DHCP Server with WFilter free?

DHCP servers are commonly used for automatic ip address assigning of client devices. However, if there are multiple DHCP Servers available in one network unintended, it will lead to IP addresses confusion or conflict.

Using the “DHCP Discover” plugin of WFilter. You can get a list of running dhcp servers on your network by a single click.

In this example, I will guide you to use the “DHCP Discover” plugin of WFilter Free.

1.Install “DHCP Discover plugin”

Click “Download Plugins” in “System Settings”->”Plugins”. Find the “DHCP Discover plugin” and install it.

2.Launch this plugin to scan your DHCP Server

Firstly, You should choose an adapter and then “Start Scan”.

When the scan finished, you’ll get a list of running DHCP server(s) and certain informations.

How to scan network devices with WFilter free?

Using the “Network Scan” plugin of WFilter. Not only you can scan online list of devices, device type, os, IP and MAC address, you also can get a list of open ports of each device.

In this example, I will guide you to use the “Network Scan” plugin of WFilter Free

1. Install “Network Scan plugin”

Click “Download Plugins” in “System Settings”->”Plugins”. Find the “Network Scan plugin” and install it.

2.Launch this plugin to scan your network

2.1 Local Subnet Scan

You can choose “Local Subnet Computers” for a local subnet scan. The maximum “Threads” number is related to your hardware capability.

When the scan finished, you’ll get a full list of online devices, together with ip address, MAC address and manufacturer, os type, ping value, netbios and open ports. Andriod phone and iphone can also be detected.

2.2 Scan by ip range

You also can input ip address to scan a target ip range.

WFilter 4.1 version is coming.

Finally, WFilter 4.1 version is coming to the beta testing after two years of development. Now let me show you the exciting new features in this new version.

1. More deployment solutions

More deployment solutions are added, especially for wifi networks. We also added solutions to monitor by mac address in multiple segments networks. In WFilter 4.0 version, only “by ip address” mode is supported, the new version will retrieve mac address information from your core switch via SNMP.

2. More monitored content

Added support for ip protocols and ip fragment. For web monitoring, WFilter new version will record browser type(userAgent) as well.

3. Faster UI speed

We adopted fastcgi technology in the new 4.1 version, which makes great improvement on UI loading speed. Monitoring performance is also improved.

4. New UI design

Added “common” menu for you to define common used menus, so you can open a page within one click.

We also re-designed the “online computers” page.


5. New “Protocols” system

With this “protocols” system, you can download and share protocols within a few clicks. You will never have the pain to configure new protocols any more.

6. New “Plugins” system

We integrated a set of tools for network monitoring and management, which is still growing. You can get plugins for network discovery, wfilter management and other related features.

7. New “web content push” feature

This feature enables you to push web content without a real blocking. You can define time interval, web push triggers for this content to appear regular in client computers.

8. More flexible policy settings

With the last version, it’s easier to assign policy for new detected devices, and set default OU policy for new detected AD users.

New version downloading URL: WFilter 4.1

Please notice: WFilter 4.1 version is still in beta testing, and some features are not fully tested. This version is only for preview and testing purpose. So if you already have a stable WFilter 4.0 running, it’s not wise to replace it with this beta version.

Turn your PC into a Wi-Fi HotSpot to deploy WFilter internet monitoring

This document decribes a new deployment of WFilter in a wireless network. The solution is to turn the wfilter computer into a wifi hotspot. So wfilter can monitor wifi clients using this hotspot.

Please notice: this solution uses the wireless adapter of the wfilter computer to share internet connections, its wifi signal might not be so strong as your wireless router.

1. Network Topology

2. Creating Wi-Fi HotSpot

Please check below steps to creating wi-fi hotspot in win8 enterprise. The detailed steps might be different in other windows versions.

1). This desktop has a wireless adapter.

2). Run “cmd” as Administrator. Enter the following command:

netsh wlan set hostednetwork mode=allow ssid=Test key=password

This command in below figure will create a wireless access-point with SSID of “Test” , key of “12345678″. You can modify the “ssid” and “key” as you want.

3). Run the following command to start wifi hotspot.

netsh wlan start hostednetwork

4). Now you will see a new microsoft hosted network virtual adapter.

5). Open your wifi’s property to enable internet connection sharing to the virtual adapter.

Now you shall be able to see the new wifi hotspot in mobile devices. Clients using this hotspot can be monitored by wfilter.

There are several other ways to create a wifi hotspot, you may do it in a way you like.

3. Setup WFilter

1). Run “Configuration Wizard” in “Help” of WFilter

2). Choose “pass-by mode”, set the wireless adapter as the “monitoring adapter” and “blocking adapter”, check “this adapter is wireless”.

3). Next until finish. Now you’re able to monitor connected wifi clients.