Untangle Spyware Blocker

Untangle Spyware Blocker Overview:

Spyware Blocker enables administrators to block spyware at the network gateway before it reaches users desktops. Zero client installations and an intuitive GUI make it easy for administrators to:

• Protect users from browsing websites that install malware
• Scan network traffic to block spyware before users can install it
• Ensure that signatures are always current with automatic updates

Is your IT guy spending too much time going from machine to machine getting rid of spyware only to have it show up again a week later?

The battle with spyware is constant, and its infection is insidious—you may not even know you have it until it’s doing real damage to your network. Weird settings, an abundance of pop-up ads (even when you’re not on the Web), clicking hyperlinks that don’t work and a sluggish system are just a few of the symptoms to look out for.

Stop spyware, adware and malware before it makes it to your network—and find already infected computers with our powerful Spyware Blocker. We use a wide range of cutting-edge technologies, including URL blocking, cookie blocking, ActiveX blocking of bad vendors and subnet logging, to protect you from attacks and infections.

Key Features:

• Open Source & Free under the GNU General Public License (GPL)
• Manage your Block and Pass Lists
• Special “request pass” button makes it easy for a user when blocked to request the site to be white listed at the administrator's discretion
• Event log shows real-time spyware detected and blocked
• Reports track violations in summary, detail, and by user

Technical Specifications:

Spyware Blocker examines web requests from your protected network, and does the following:

• Uses virus signatures to detect and identify specific viruses
• Prevents keyloggers, a computer program that captures and stores the keystrokes of a computer user
• Provides a URL blacklist to block known spyware websites (for example, gator.com)
• Provides a URL blacklist to block websites that require cookies
• Blocks harmful ActiveX controls that are known to be spyware applications
• Examines the IP addresses of websites that users visit, and compares those IP addresses against a list of offending subnets

In the unusual event that members of your organization visit a legitimate website that Spyware Blocker deems malicious, the Untangle Server's interface enables you to create exception rules to remove this website from Spyware Blocker's blacklist. In addition, the Quick-Passlist feature can be enabled to allow uses to temporarily or permanently unblock sites.

What It Does

Transparent HTTP scanning on any port, list –based filtering of URLs, subnets, cookies and ActiveX controls

How It Does It

Uses dozens of custom-tuned community blacklists in addition to Untangle's Virus Blocker technology, based on ClamAV

Controls

• Customizable blocklists for cookies, subnets and ActiveX
• Customizable URL/domain passlist
• Quick-Passlist feature: at administrator option, users can unblock sites when they receive a spyware warning in their browser
  • Can be configured to allow either temporary, per-user unblocking
  • Or global, permanent unblocking
• Global on/off blocking of ActiveX

Screenshots:

 

Filter Spyware by URL, Subnet, Cookie & ActiveX ( Enlarge Image)	Advanced Administrative Features (Enlarge Image)
Splash Page for Blocked Sites (Enlarge Image)	Spyware Logging ( Enlarge Image)
HTML Reporting: Network Level Overview ( Enlarge Image)	PDF Reporting: Client Level Spyware Incidents ( Enlarge Image)

 

Spyware Blocker FAQs:

My users complained that they cannot connect to somesite.com, and it keeps showing up in my Event Log as blocked. How can I stop somesite.com from being blocked?

You can add a rule to the Pass List for somesite.com, as described in Spyware Blocker.

While I agree that ActiveX is something I would like to keep out of my network, one of our business partner's sites requires ActiveX. How should I configure my system?

First, disable all ActiveX Controls as described in Blocking All ActiveX Controls. Then, exclude your business partner from this restriction by adding the business partner's domain to the Pass List as described in Unblocking Spyware Websites.

Hardware Requirements:

• The Untangle Server requires a dedicated PC installed at the gateway to your network.
• Your hardware does not need an operating system - the Untangle Server installs its own operating system.
• The Untangle Server software completely erases any content or data that may exist on your PC hard drive.

Sizing Guidance

Recommended Configurations (New Hardware)

When purchasing new hardware, spending a couple of extra dollars to meet the following recommended configurations provides the best value.

Resource	Up to 50 Users	Up to 100 Users	Up to 300 Users
Intel/AMD-compatible Processor	Pentium 4 equivalent or greater	Dual Core	Dual Core
Memory	1 GB	1 GB	2 GB
Hard Drive	80 GB	80 GB	80 GB
NIC's	2 (3 for DMZ)	2 (3 for DMZ)	2 (3 for DMZ)

Verified Configurations (Trials, Refurbished or Repurposed Hardware)

These are the lowest verified hardware configurations that provide reliable — albeit sometimes slower — performance in production. However, it may be possible for organizations with lower than average network traffic or organizations that do not wish to use all of the modules to run Untangle on smaller systems.

Resource	Up to 50 Users	Up to 100 Users	Up to 300 Users
Intel/AMD-compatible Processor	800 MHz	1.2 GHz	1.6 GHz
Memory	512 MB	1 GB	2 GB
Hard Drive	20 GB	30 GB	40 GB
NIC's	2 (3 for DMZ)	2 (3 for DMZ)	2 (3 for DMZ)