Q1: Can I allow downloads only for certain users, and not others? If so, how is that accomplished?
Q2: What types of files does Download Blocking prevent?
Q3: Does Download Blocking only block by file extension?
Q4: Can I easily disable the blocking?
Q5: I am only interested in Spy-ware blocking for now. How easy is the system is to install
Q6: I already have existing spy-ware and mal-ware on the network. How will CIPAFilter help me?
Q7: Can I manage what is blocked and what is not?
Question 1: Can I allow downloads only for certain users, and not others? If so, how is that accomplished?
A: If CIPAFilter is used as a web proxy, with a web authentication enabled, you can control downloads by username. If integrated with a Window-based server, you can easily create a group called "NoDownload" for example, to easily control download privileges.
Download Blocking can also be disabled by IP address or subnet, or by white-listing a globally allowed web-site.
Question 2: What types of files does Download Blocking prevent?
A: Any executable, ActiveX Controls, Compressed files and any other potentially harmful binary code.
Question 3: Does Download Blocking only block by file extension?
A: No. Download Blocking is a very sophisticated system that not only blocks by extension, but by binary transfer type (called mime type). It is designed to recognize harmful code and file transfers.
Question 4: Can I easily disable the blocking?
A: Yes. Simply uncheck the Download Blocking check box and restart CIPAFilter. All downloads will now be allowed.
Question 5: I am only interested in Spy-ware blocking for now. How easy is the system to install?
A: The installation is typically very easy. If you are keeping your existing firewall then CIPAFilter simply installs as a transparent in-line Bridge and monitors all traffic with a transparent proxy system. No IP configuration is necessary and other features may easily be added at a later date.
The only configuration necessary would be to globally allow which sites you want all executable downloads allowed.
Question 6: I already have existing spy-ware and mal-ware on the network. How will CIPAFilter help me?
A: Existing spy-ware on the computers will have to be removed after the installation of the Spy-ware blocking system. CIPAFilter support technicians will assist in providing software to help in this process.
Question 7: Can I manage what is blocked and what is not?
A: No. The Spy-ware blocking system does not simply block known executable file extensions. It also blocks Active-X controls depending on how they are installed or accesses. The system also looks at the actual binary code of downloaded files and can in many instances block code without executable extensions. Because the system uses a multi-faceted approach you cannot modify anything other than white-listing a site or by-passing download blocking for specific users and IP addresses. The goal of the system is to block spy-ware and unwanted downloads effectively and automatically.
