User Tools

Site Tools


https50

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
https50 [2019/02/12 16:27]
root
https50 [2019/02/13 13:30] (current)
root
Line 30: Line 30:
 Here’s some instructions (at the example of Windows 7): double-click the certificate. Choose the “install certificate” button. The Certificate Import Wizard would be launched. When the wizard would ask you about the store for this certificate,​ select "Place all certificates in the following store",​ click Browse, and choose the “Trusted Root Certification Authorities store”. ​ Here’s some instructions (at the example of Windows 7): double-click the certificate. Choose the “install certificate” button. The Certificate Import Wizard would be launched. When the wizard would ask you about the store for this certificate,​ select "Place all certificates in the following store",​ click Browse, and choose the “Trusted Root Certification Authorities store”. ​
  
-After these actions, the certificate will be imported in the global system store. It will work for browsers that use system certificates store, for example, Internet Explorer, Chrome, Yandex. If a browser uses its own store, like, for example, Firefox, than you'll have to import certificate into this browser. For Mozilla Firefox you can do it this way: +After these actions, the certificate will be imported in the global system store. It will work for browsers that use system certificates store, for example, Internet Explorer, Chrome. If a browser uses its own store, like, for example, Firefox, than you'll have to import certificate into this browser. For Mozilla Firefox you can do it this way: 
  
 Enter the Preferences menu, choose Advanced – Certificates – View certificates – Import and then choose the certificate that you downloaded from ICS CUBE. Enter the Preferences menu, choose Advanced – Certificates – View certificates – Import and then choose the certificate that you downloaded from ICS CUBE.
Line 39: Line 39:
  
 **Filter without certificate substitution**. In this mode you don’t need to implement a certificate to workstations. But this way ICS CUBE would only know about destination domain, but not whole address. ​ **Filter without certificate substitution**. In this mode you don’t need to implement a certificate to workstations. But this way ICS CUBE would only know about destination domain, but not whole address. ​
-For example, you can choose filtration without certificate substitution if you want to just block the whole “yandex.ru” domain. But if you want to block “yandex.ru”, but permit “yandex.ru/video”, then you need to assemble certificate substitution for decryption of the destination.+For example, you can choose filtration without certificate substitution if you want to just block the whole “google.com” domain. But if you want to block “google.com”, but permit “google.com/video”, then you need to assemble certificate substitution for decryption of the destination.
  
-Also, in this mode you can set up full decryption for any domain and any user in the field “filter with decryption”. If you set it up for a user, you should import your certificate to his workstation,​ and if you set it up for a domain, you should import your certificate to all workstations that will address this domain (for example, ​vk.com). ​+Also, in this mode you can set up full decryption for any domain and any user in the field “filter with decryption”. If you set it up for a user, you should import your certificate to his workstation,​ and if you set it up for a domain, you should import your certificate to all workstations that will address this domain (for example, ​facebook.com). ​
https50.txt · Last modified: 2019/02/13 13:30 by root