HeaderLine

URL Filtering FAQ

Why is URL filtering needed?

Security threats, productivity loss, and regulatory compliance are pushing more businesses to adopt URL filtering solutions into their organizational infrastructure. The Web today is increasingly interactive, dynamic and complex. This means that URL filtering solutions that accurately categorize and filter the most up to date Web sites, including blogs and social networks, can provide a sustainable competitive advantage for hardware and software vendors and service providers.

How is GlobalView URL Filtering Implemented?

GlobalView URL Filtering is typically integrated into a service provider environment or a vendor device such as a Web Security Gateway. It consists of an engine that resides in existing Web security offerings and an “in the cloud” detection and categorization center (the GlobalView Network).  These provide URL filtering and Web security functionality.

After integration within the service provider environment or vendor device, URLs can be fed to the GlobalView URLF engine to determine the URL category.  The engine first checks its local cache for URL categorizations - typically 99% of queries receive a local response.  If necessary, the GlobalView URLF engine queries the cloud-based GlobalView Network for relevant updates. The vendor device or service provider server then blocks, allows or strips content according to defined policies for the returned categories.

How many categories are provided?

URLs are allocated at least one of 64 categories.  8 of these categories are security related.  A URL may have up to 5 categories associated with it.

How much bandwidth does GlobalView URLF require for communication with the GlobalView Network?

Commtouch has developed an auto-learning Locally Cached Database (LCDB) that adjusts its content according to the actual browsing habits of the users served.  The result is local categorization data for over 99% of all queries.

For the small percentage of the cases where a query is transmitted to the Commtouch GlobalView Network, the query and result usually add up to no more than 1kB.  This is an order of magnitude less than an average Web page which could be tens to hundreds of kilobytes.  Commtouch has performed measurements within enterprises using GlobalView URL Filtering and found that the queries to the cloud amounted to a mere 0.1% of total HTTP traffic.

The additional traffic created by Commtouch’s cloud architecture is therefore negligible.

I already have a URL filtering solution integrated within my product offering. Is there a migration tool to GlobalView URLF?

Commtouch has a unique migration kit that facilitates a simple move to Commtouch when renewal time rolls around. You can continue to use your existing configuration and policies but benefit from Commtouch’s more advanced and secured solution. The migration kit maps Commtouch categorization to your existing categorization scheme, freeing you from the responsibility of configuration updates.

How do you categorize URLs “embedded” in cache or translation sites?

GlobalView URLF supports accurate categorization of embedded URLs – For example:
http://translate.google.com/translate?hl=en&sl=es&tl=en&u=http://www.cnn...
- would be categorized as “News” and “Translators”.

http://webcache.googleusercontent.com/search?q=cache:K_BgMYvwL50J:www.sw...

Many
competing solutions will simply categorize the translation or cache site, which means they can become an easy workaround for people to access disallowed or insecure sites. The accuracy of GlobalView URLF prevents users from bypassing the system by using such sites.  Similarly GlobalView URLF also correctly categorizes archive sites and content delivery sites.

How do you handle HTTPS?

GlobalView URLF includes an integrated engine that provides categories for a URL upon request. Whether it’s HTTP, HTTPS, FTP or even IP, the partner device extracts the relevant URL from the session and passes it to the Commtouch URLF engine in order to receive the most updated categories.

In what types of products can GlobalView URL Filtering be used?

GlobalView URLF can be embedded into a range of endpoints including hardware devices and applications such as:

  • Web gateways.
  • Network & security devices.
  • Mobile devices.
  • Desktop applications.

The solution is also ideal for service providers such as:

  • Software-as-a-Service (SaaS) and Security-as-a-Service providers.
  • Internet Service Providers.
  • Mobile operators.
  • Web Portals.

Integration of GlobalView URLF is simple and enables these solutions to provide a new level of URL filtering for applications such as:

  • URL categorization solutions.
  • Web Security.
  • Parental control.
  • Business productivity management.

How does Commtouch ensure accuracy of its URL filtering?

GlobalView URLF ensures that the categorizations provided per URL (up to 5) truly reflect the nature of the site.  This necessitates advanced automatic algorithms as well as understanding and analysis of multi-layered and embedded URLS.  GlobalView URLF also indexes IP addresses since a hostname may be identified by one or more names and IPs (aliases).
GlobalView URLF provides highly accurate granular categorization of multi-category websites.  This implies choosing the correct granularity on a per site basis.  Some sites neatly fit into a single category with the exception of a particular “corner” of the site for example, the swimsuit pages of the otherwise sports-oriented Sports Illustrated site (which itself is found in the news oriented CNN).  Web 2.0 environments such as blogs on the other hand may contain millions of URLs representing every possible Web category. 
GlobalView URLF also supports embedded URLs – these are a common feature of search, translation and content aggregation sites.  Correct categorization as provided by the Commtouch solution prevents potential bypass by usage of these sites.

What is the source of the URL filtering data? How do you ensure broad relevant coverage?

GlobalView URLF uses a combination of data center infrastructure (the GlobalView Network) and a wide range of data sources, to maintain a database with comprehensive URL coverage and high categorization accuracy.

Extensive coverage for relevant productivity and compliance categories is ensured by combining a range of sources and focused analysis:

  • Open traffic collectors around the world provide real-time global insights into user browsing behavior.
  • User browser requests are collected and used as triggers for analysis of what customers actually need.
  • Web trends and patterns are gathered from various Internet sources.

Extensive coverage for real time security is ensured by combining the following sources:

  • Recurrent Pattern detection (RPD) – Commtouch’s mass-email filtering technology collects URLs found in bulk emails for analysis – these URLs often point to malware infected, spam or phishing sites.  Billions of email messages are analyzed daily providing a vast source of real-time data.
  • The Commtouch Security Alliance gathers security expertise from leading Web defense vendors across the security spectrum.
  • Proactive threat research by Commtouch’s dedicated team covers zombies, phishing and other threats to identify potentially unsafe URLs before the first click.