As part of their normal operations, some GFI products require specific TCP and/or UDP ports to be open so that a connection can be made from the server to the client and vice versa. This article aims to point out some Microsoft online help links that will assist you in configuring the Microsoft Windows Firewall on several different Windows platforms. Instructions on how to administer and configure the Microsoft Windows Firewall can be found below:

Microsoft Windows XP:

http://technet.microsoft.com/en-us/library/cc875811.aspx

Microsoft Windows Server 2003:

http://technet.microsoft.com/en-us/library/cc739696(WS.10).aspx

Microsoft Windows Vista / 7 / Server 2008:

http://technet.microsoft.com/en-us/lib

The GFI WebMonitor SmartGuide provides overview information that helps ensure easy deployment of the product. Please take the time to review this document before installing the product. GFI WebMonitor offers two installation modes. There is the standard installation, and a special installation for the unique needs of Microsoft ISA/TMG Server. If you are running the ISA/TMG server version, please download the smartguide from here. If you are running the standard version (Standalone Proxy Version), please download the smartguide from here.

The following patches have been released for GFI WebMonitor 2009 Standalone Proxy Version Build 20100213 Notes: Unless otherwise specified, all patches listed in this article will be included in newer builds of GFI WebMonitor 2009 Standalone Proxy Version Installation instructions are included with the download Patch: WM2009PATCH2010032401

Description: BitDefender Virus Scanning Engine crashing after restarting the GFI WebMonitor services Download Link: WM2009PATCH2010032401.zip

The GFI WebMonitor Standalone is easy to implement within your network and does not require any router configuration changes in most cases. However in order to increase security within your network infrastructure, it is recommended to perform the following optional router configuration change.

In some setups, computers can connect directly to the router to access the internet. Such HTTP connections would not pass through the GFI WebMonitor proxy service, and therefore will not be scanned. It is recommended to create a firewall policy on the router to block any HTTP and HTTPs connections arriving directly from the client machines. The only machine which should be able to access the internet over HTTP and HTTPs should be the GFI WebMonitor server.

Further information on how to configure your specific router can be found in the GFI WebMonitor Help <GFIWebMonitorDataHelptoc.html>

Issue Encountered:

GFI WebMonitor Web Filtering Policies are not working correctly for certain users

Resolution:

There are various reasons why Web Filtering Policies might not work correctly for certain users in GFI WebMonitor. The following checklist can be used to identify the possible cause of the issue:

Authentication

If the web filtering policy created applies to Active Directory users and/or groups and not to IP addresses, one must ensure that GFI WebMonitor receives the Active Directory username information in the web request. This information can only be obtained if Microsoft ISA/TMG has enforced web proxy authentication enabled. KBID002526 explains how to enable enforced authentication on Microsoft ISA/TMG server

Multiple Policies for a single user

Verify that there isn't anothe

Issue Encountered:

GFI WebMonitor has been successfully installed, however no web traffic is being scanned through the GFI WebMonitor Dashboard.

More Information:

In order for GFI WebMonitor to scan Internet traffic, the Microsoft Internet Explorer proxy settings must be configured to use the GFI WebMonitor Proxy (GFI WebMonitor Standalone Proxy Version) or Microsoft ISA/TMG Proxy (GFI WebMonitor for ISA/TMG).

Resolution:

Perform the following procedure to configure the Microsoft Internet Explorer proxy settings: Open Microsoft Internet Explorer Click on 'Tools' > 'Internet Options' > 'Connections' > 'LAN settings' The 'Automatically detect settings' checkbox should be selected. If this option was not selected, then turn it on, re-launch the browser and test again. If problem

Issue Encountered:

After installing GFI WebMonitor, a third party application is no longer able to download files / updates correctly.

More Information:

In a default installation of GFI WebMonitor, a 'download status' window will appear when downloading a file to show the download progress and the virus scanning status. This status window can sometimes interfere with third party applications that try to download a file directly from the Internet.

Resolution:

The first step in resolving this issue is to determine what type of file is being downloaded, and where it is being downloaded from. This information can be obtained from the 'Past Connections' node within the GFI WebMonitor configuration: Open the GFI WebMonitor configuration Expand 'Monitoring' and click on the 'Past Connections' node Using the IP address of t

Issue Encountered:

When a client attempts to browse the Internet using an Internet Browser, the proxy server constantly asks the client to authenticate. Why?

More Information:

If you have enabled Basic authentication on your ISA/TMG server or the GFI WebMonitor Standalone Proxy, every new request will require authentication. It is recomended to use Integrated Authentication since this will not require the user to enter their credentials when accessing the internet

Resolution:

Depending on which version of GFI WebMonitor you are running, perform the procedure below to enable Integrated Authentication: GFI WebMonitor Standalone Proxy The following procedure explains how to configure authentication in GFI WebMonitor Standalone Proxy: Open the GFI WebMonitor configuration Expand the Configuration' node and cli