UserGate Proxy Server for Windows
Windows Strengths and Weaknesses
The vast majority of computers, both personal and corporate, the use of Microsoft Windows, which has included Internet access for over a decade and that Windows became more complex, so has its Internet connectivity software. Windows 98 Second Edition Internet Connection Sharing (ICS) to facilitate group access to the Internet from a LAN. More complexity is added with the outbreak of Routing and Remote Access Widows 2000 Server in your network address (NAT) functions.
It took a while before experts noted that ICS has specific shortcomings. ICS addresses to changes in network card, which can cause problems on intranets. Because of this, ICS can only be used in small offices or home networks and even then, ICS network office is not recommended, because there is no user authorization or validation with ICS. Even using a home network makes any insecure Internet connection, since it is so easy for criminals to access their computers using counterfeit where they come from (their IP addresses and MAC addresses).
Need help
Windows can organize the exchange of Internet, but security has never been a strength. In practice, either hardware or software solutions of other companies are purchased to provide the necessary security solutions. One of the most important is UserGate Proxy Server.
UserGate Proxy Server provides the local network users with secure Internet access by defining the access policy, prohibiting Internet resources in particular and limiting traffic or working time of a user on the Internet. Moreover, calculations can keep UserGate different user traffic and protocols, which greatly simplifies control Internet traffic costs. Lately, between Internet service providers (ISP) has been a trend toward unlimited traffic and to that end, UserGate Proxy Server provides a very flexible system of rules.
UserGate Proxy Server works with NAT support on Windows 2000/2003/XP to the Internet (using the standard TCP / IP). UserGate can also work on Windows 98 and Windows NT 4.0, but without NAT support. UserGate not require special resources for its operation, but just need a relatively small amount of hard disk memory for its cache and log files. UserGate also be installed in a dedicated team to maximize resources network.
Proxies
Your browser (either Internet Explorer, Firefox, Safari, Netscape, Opera or Mozilla to name the most popular) and is capable of documents cache. However, not enough disk space is reserved for these purposes, if the Internet connection is shared by an entire office. The reason for this is that the probability that a person visiting the same Web page is much lower than when tens or hundreds of people are sharing the connection. Creating a common cache for a company can greatly reduce waste of bandwidth, and make almost instantaneous receipt of the documents that are commonly accessed by employees. UserGate Proxy Server can also connect to external proxies in cascade (of your Internet Service Provider) to increase the speed of data reception and reduce their bills online (transport costs for a provider are generally less when using a proxy server).
Setup
Settings of the cache configuration is done from the home of the "Services". The first step is to enable the cache, then you can set your options separately, including caching of POST requests, dynamic objects, cookies, and FTP content. You can also set the size of the space Disk Cache and time-to-live for cached documents.
Other options also must be established before we can begin working with the program. As a rule, this task is completed in the following order:
1. Create the users of the program.
2. Configure DNS and NAT on the server UserGate. At this stage NAT can be configured with the wizard.
3. Set parameters of the various protocols (HTTP, FTP, SOCKS), the intranet interface that was heard, and if it will cascade. All these can be set in their corresponding service configuration pages.
4. Configure the network connection on each computer customers including the gateway and DNS in TCP / IP in network connection properties, which must be established.
5. Creating an Internet access policy.
Modules to make things easier
To make the program more user friendly, we divided it into several modules:
The server module starts on a computer that has Internet access. This module controls the execution of all tasks.
UserGate administration is done with the help of a special module: UserGate Administrator, which handles all server settings.
UserGate client authentication is a client application installed on the each user's computer. This module monitors and controls user authorization to UserGate server, if you choose a separate authorization for IP or IP and MAC.
Security and Permissions
UserGate Proxy Server blocks unauthorized access. Each user can be automatically authorized by your IP address alone or a correct combination of IP and hardware (MAC). Each user can assign specific permissions
Makes it easy to add users and assign quickly the same permissions to a group of similar users, a separate page provides management of users and groups. Groups make it easy to manage users who must have a common configuration, such as network access and tariffs. You can create as many groups as necessary. The groups are usually created on the basis company structure and hierarchy.
Each group can have its own rhythm that is used to manage the cost of Internet access. A default rate can be set or left empty, in which case the connections of all users of a group are not paid unless a different rate is at a user's properties.
There are a number NAT rule violation under the program. These are the rules for access via Telnet, POP3, SMTP, HTTP, ICQ and other protocols. While setting the properties the group can identify which rules apply to the group and its users.
A dial on demand option can be used when an Internet connection is through a modem. In this case, the modem dials the connection when requested. Dial on demand can also be used with ADSL, whether to connect to the Internet provider is necessary dial a VPN connection. In this case, the VPN connection can be configured as demand dialing.
UserGate If a computer is a domain in Active Directory, users can import it and then divided into groups requiring similar access rights: authorization type, frequency, NAT rules (if rules the group did not fully meet user needs).
Authorization Types and rules
UserGate Proxy Server supports several types of authorization, including authorization through Active Directory and Windows session, which allows integration into existing network infrastructures UserGate.
UserGate uses its own module client authentication for some types of authorization. Depending on the type of authorization you choose, it is necessary to indicate in user options, address or user's IP (or IP address range), assign a login (username and password) or assign a user name only. If you want to send a user, reports of their use of Internet traffic can enter the user e-mail here.
UserGate rules can be configured more flexibly access RRAS remote. Using rules can block access to specific URLs, traffic limits for certain protocols, deadlines, set a maximum size of file that a user can download, so Windows does not provide the functionality required to fulfill these tasks.
The rules can be created with the help of the wizard ever. Each rule has conditions of application and an object that is executed when one or more conditions are met. For example, near a connection, assign a rate or speed, conditions, etc. used protocols include the working time limits of a user traffic (incoming and outgoing), the remaining money in the account, and, IP address list and the list of URLs. Settings also allow specifying the file extensions that users can not download.
In a number of organizations of the use of instant messaging, like ICQ, is prohibited. This is easy with UserGate. ICQ prohibit simply create a rule blocking any connection with Host '* login.icq.com *' and apply it to all users.
UserGate Proxy Server provides rules to allow rates vary during the day or night time access to local resources or policy (whether such variations are offered by your ISP). For example, to switch between day and night, two types rules are created: one that performs the switching to a specific time of day and one night rate changes back to the day rate.
Settings DNS and NAT
DNS (Domain Name System) is what is used on the Internet so you do not have to remember a site numbers (real Internet address) and 53.128.182.67), It can only remember his name, as www.famatech.com. One party control of the Internet DNS is the DNS server, a computer (there are many DNS servers) on the Internet which translates the names of the sites to their number, so when the browser will www.famatech.com, the DNS server knows the correct IP number to send the browser request.
DNS settings UserGate proxy server is simply the location (IP address) of one or two of these DNS servers (the closest server DNS is the physical location of your ISP, usually the best), where each client DNS requests are forwarded to. You must enter the IP address on the interface UserGate Proxy Network Server as the gateway and DNS in TCP / IP network connection for each user on your local computer.
There is another way configuring the DNS. You can add a new NAT rule, in which the receiver IP (internal interface) and the sender IP (external interface) is configured on port 53 and the Protocol for UDP. Using this method, this rule should apply to all users. In the connection settings for each local computer, the IP address of your ISP's DNS should be set such as DNS and UserGate proxy server IP address configured as a gateway on each local computer.
Mail clients can be either through port mapping or through NAT. Allowing instant messengers for use in the organization, the network configuration should be changed for them: user firewalls and representation, the IP address of the internal network interface of UserGate Proxy Server must be indicated, and select HTTPS or SOCKS needs. If you use Yahoo Messenger, you should keep in mind that when working through a proxy server, Yahoo, chat rooms and video chats are not available.
The statistics of each user is logged in a register. These include data on each connection time began, duration, total cost, URLs and PIs visited, the number of bytes received and bytes sent. It is impossible to cancel or misrepresent the record of any of this information about user connections in the UserGate Proxy Server statistics file. The statistics can be viewed either from the Server Manager or a special statistical module. Statistics Data can be filtered by user, protocol, and the period of time, and these statistics can be exported to Microsoft Excel for further processing.
Early versions of UserGate proxy cache server only HTTP (web) pages. The latest version introduces new components designed to ensure information security. UserGate Now users can take advantage of modules integrated firewall and Kaspersky Antivirus. The firewall can control (allow or block) specific TCP ports and may also publish a company Web resources. UserGate Proxy Server processes all packets received from the network. Every port that is open in the program, for example, HTTP, socks and others are selected by the administrator or can be opened in the firewall automatically. You can see which ports are open in the auto rules table in the firewall rules page.
Future development plans for UserGate Proxy Server include creating your own VPN server may have an alternative VPN solution that offered by the introduction of a Windows mail server that has its own antispam support and development of an intelligent firewall at the application level.
About the Author
http://www.entensys.com
Updated / New Proxies List (09-05-09) (Includes IPs and Ports)
