User manual AVIRA ANTIVIR WEBGATE

[. . . ] User Manual Avira AntiVir WebGate | WebGate Suite www. avira. com Contents 1 About this Manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 1. 1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 1. 2 The Structure of the Manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 1. 3 Signs and Symbols . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 1. 4 Abbreviations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ] Enter the user and group IDs, which Avira AntiVir WebGate 26 ICAPPort User Group Avira GmbH Configuration WebGate should assume after start (and thus turning in the root permissions). If you do not want this, you must specify the values for User and Group in the file /etc/avwebgate. conf . ScannerListen Address WebGate no longer starts the SAVAPI daemon. ScannerListenAddress /var/run/avwebgate/scanner If you modify this parameter, you must also change the value for ListenAddress in /etc/avwebgate-scanner. conf. See Scanner Configuration in avwebgate-scanner. conf ­ Page 33 AllowHTTPS Tunnel Allow HTTPS tunnel: WebGate allows tunneling for SSL connections (HTTPS). WebGate does not interfere with the transaction, it just forwards the data. Due to this fact, it can not verify if the protocol being spoken is really HTTP on top of SSL. For this reason, it allows only connections to ports 443 (HTTPS) and 563 (SNEWS). Default: AllowHTTPSTunnel no The data transferred through the HTTPS tunnel will not be scanned by WebGate. AllowedHTTP ConnectPorts Tunneling SSL-encrypted connections: If you want to allow HTTPS connections to non-standard ports, you can do so by adding the desired ports to this list. AllowedHTTPConnectPorts 443, 563 Maximum number of connections allowed: The maximum number of simultaneous connections allowed to run through WebGate. The value sets the limit for the number of connections or threads allowed simultaneously. Default: MaxConnections 1024 Avoiding Client-timeouts by large downloads: Some browsers and proxies send an error message, if no data is received after a certain interval (timeout). WebGate may come to such timeout messages, because of delays during large downloads and scanning. In order to avoid timeouts, WebGate offers the following possibilities. · If the Client is a browser, WebGate sends an HTML progress page, which is updated at regular intervals. Default: RefreshInterval 0 Max Connections Refresh/ Redirect/ Keepalive Interval Avira GmbH Avira AntiVir WebGate 27 Configuration · If the option RefreshInterval is deactivated or the Client is not a browser, (temporary) HTTP redirects are sent to the Client. Thus, the Client is cyclically redirected to a dynamic-generated URL, intercepted by WebGate in order to avoid the timeout. Default: RedirectInterval 0 The above method does not work for all Clients. When encountering problems, use the KeepaliveInterval option, to make WebGate send messages to the Client at certain intervals. The value must be smaller than the one set in the Client or proxy server. Default: KeepaliveInterval 30 If you encounter client timeout problems, because the timeout methods described above are not appropriate in your environment or do not work properly, you may enable data trickling by setting KeepaliveMode in avwebgate. conf to trickle. If this method is used, WebGate sends small pieces of the data at the specified KeepaliveInterval, until the download and scan is complete. Once the file is downloaded and scanned, the remainder of the file will be immediately transferred to the client (if clean). · KeepaliveMode · It is NOT recommended to enable data trickling unless you are experiencing problems using the other timeout prevention methods. [. . . ] The systematic process of solving a problem using general and specific rules drawn from previous experience. When typical virus-like functions are found, the respective macro is classified as "suspicious". The base component of a Unix operating system, which performs elementary functions (e. g. A file containing reports generated by the program at run-time, when a certain event occurs. [. . . ]