The “Content filter” module is located in “Security” menu. This module is designed to configure and block web-pages containing specified keywords or regular expressions (templates).
The module has five tabs:
For content filtering of traffic you need to add a content filtering rule(s) in the Menu - Users and statistics - Rulesets. The content filtering rule(s) can be applied both for a User and for a group of users.
Or you can add “Content filtering rule” on the “Rules and restrictions” tab in the personal User / group of users module. It is important to note that for correct work of content filter to filter HTTPS traffic by deciphering it.
The “Content filter tab” displays status of this service (running, stopped, not configured), has “Disable” button (or “Enable”, if the module is disabled) and recent log messages.
After ICS CUBE registration (Menu - Maintenance - About) and content filter set up, the “Content filter” tab will looks like:
Content filter module will have “running” status and log messages will displayed.
The “Settings” tab contains checkboxes for module configuration and updates. By default the flags are not set.
The “Use content filter” checkbox automatically sets the “Check templates” and “Check keywords” boxes.
If necessary the “Content filter database auto update” checkbox can be set separately.
Note 1. After ICS CUBE installation lists of content filter database are empty. If the “Content filter database auto update” checkbox is not set you will need to create and fill up databases manually.
For using a ready-made databases it’s recommended to check the box “Content filter database auto update”. System will connect to cloud service and download the latest version of the lists. After that it will update these lists one time per day.
Note 2. After all settings are done don’t forget to press the “Save” button. It is important to check database updates on the “Content filter database” tab. Choose any of the lists. If the update was successful some of keywords and templates from this list will be shown under the name of chosen list.
This tab allows to:
Important. By default the “Content filter” module contains an empty list of keywords for school and lists of keywords from websites: minjust.ru and fskn.gov.ru. These lists contain keywords and templates only in russian language and are recommended by russian federation government bodies. You can, certainly, create your own lists of keywords in english appropriate for your location.
For the first year of using ICS CUBE all databases are provided for free. After that you must have an active “Update & Service” license.
Each database contains three tabs: “Common”, “Templates” and “Keywords”. You can view and edit these in the “Edit content filter words set” window. To open it press “Edit” button next to corresponding database or make a double-click for the database you want to alter.
Inactive database is shown in darker color.
The “Edit content filter words set” window allows to add and delete templates and keywords.
To export a list from the “Templates” or “Keywords” tabs you need to choose a corresponding tab and press the “Export” button. The list will be downloaded by browser with file name - <Database name>-<type of list>.txt, for example - «Words list from website fskn.gov.ru-regexp.txt».
Press the “Import” button to add custom list of templates or keywords. File for import should contains list of templates or keywords (each starting on a new line) in the *.txt format.
Use search bar for searching templates and keywords in the content filter databases. When typing template words, a dynamic database search is started. As a result, only databases containing matching templates will be displayed on the “Content filter database” tab.
For delete an item from a database you need to choose it by clicking on it and press the “Delete” button:
Important. The default databases (Word lists from website minjust.ru; Word lists from website fskn.gov.ru; Word lists for school by service SkyDNS) will be deleted without recovery opportunity. You can export this lists to a file before deleting.
The “Events” tab allows to display, filter and export information about blocked content. There is an ability to show events for current day, week, month. For detailed search you can specify period of interest.
All blocked content will be displayed in the “Events” tab and will contain reason for blocking.
Press onto the line with event of interest for viewing full URL of blocked website:
For searching by events use a search bar in the right upper corner.
The “Log” tab displays a summary of all system messages of the corresponding service with date and timestamp. The log is divided into pages, using the “forward” and “back” buttons it is possible to go from page to page, or enter the number of the desired page directly.
In the right upper corner of the log module there are search bar and the period selector for displaying the event log. By default, the log displays events for the current date. If necessary, you can save the log data to a file by clicking the “Export” button or delete the log data for a certain period by clicking the “Delete logs” button.
Important. The “Delete logs” button deletes ALL logs that are maintained by the “Content filter” module.