Product Features.

ContentKeeper Web has all the innovative and powerful features that large enterprises will need to effectively manage their Internet resources. It focuses on network management, accountability, security and high availability.

ContentKeeper can produce significant savings resulting directly from :

• More productive utilization of staff time
• More effective utilization of available costly Internet bandwidth
• Less exposure to legal liability arising from copyright breaches and potential sexual harassment issues
• Increased protection against hackers, web-based virus attack and other malicious code attacks
• Protection of company reputation
• Faster network response times and throughput

Ease of Installation and Use :

• 15 minute easy installation (in most sites)
• Full username resolution. Identify individual users by name, IP, groups etc
• Manage users via groups and/or individual policy based controls
• Reporting by groups, usernames, Domains, IP address, time date, sites visited, categories visited, bytes, images and objects downloaded etc
• Instant browser-based bypass with site reclassification request
• Minimal, ongoing management requirements
• Full per category, per user, per group access control settings
• Single or Multiple categorisations per site
• Run in global "silent/invisible mode" for evaluation, reporting & policy development (transparent to users)
• Run in policy specific "silent/invisible mode" for policy development (transparent to users)
• Global policy - over rides all other policies
• Default policy - catch all
• Custom policies - caters for different Internet access rules for different groups within your organization
• Staff Notification screens - advises your staff that they are being monitored, compliant with local privacy legislation
• Standard and custom blocking screens (block, coach, authenticate, time, PSUs etc.) customize per category, per user group etc
• User, group, IP, VLAN based policy controls
• Local Administrator can re-categorize instantly (no vendor involvement needed)
• Block and manage over 70 protocols
• User defined protocol controls
• Custom categories - create your own, load manually or via text file import
• White listing and Black listing
• Custom URL and file type overrides
• Dedicated stand alone fault tolerant appliance
• Control list plus dynamic real time filtering engine
• Transparent installation and operation. No IP addresses on bridging ports
• Automatic activation and registration at installation time
• Automatic hands free software updates
• Automatic scheduled backups - web based ad-hoc backups
• Automatic hourly URL database updates
• Fully functional demonstration system available for download
• All features & updates included with annual subscription
• Contact ContentKeeper to arrange for an evaluation Appliance or use the latest ContentKeeper ISO image available for downloaded found here.

Blocking methods and Controls - your choice of:

• Allow - allows access to the site
• Block - user receive block screen, traffic terminates at ContentKeeper appliance
• Coach - user is stopped by a warning screen (outlining acceptable Internet usage policy), user can choose to continue after warning to the desired site
• Authenticate - user is forced to re-authenticate manually before continuing
• Time of Day Controls - enforce different access policies based on time of day. eg. allow more access before or after business hours or at lunchtime.
• Block Discard - Spyware/Malware log file controls
• Time based quotas - Personal Surfing Units (PSUs) across multiple categories
• Byte count based quotas - Personal Surfing Units (PSU) across multiple categories
• Policy base protocol controls MSN Chat, AOL etc.
  
  Multiple policies allows combinations of the above settings to cater to different access profiles for different groups or individuals within your organization.

Reporting: - Comprehensive Enterprise Level Ad-hoc & Automated Reporting with ContentKeeper's Advanced Reporting Module (ARM)

• Enterprise level full color graphical and tabular reporting capabilities
• Pie Charts, Column Charts, Tables etc
• Summary reports with easy drill down and pop-up navigation
• Detailed reports - all details on user, domain, time, date, sites, images and objects access down to the smallest element of HTML etc
• Wizard driven for easy report creation
• Ad-hoc reports
• Canned reports - largest users, most visited web sites etc
• Fully customizable report templates
• Fully automated with scheduling and automatic delivery via email, web etc
• Multiple formats MS Word, Excel, Text, CSV etc.
• Fast inbuilt Database system - no need to install MS-SQL or external DB system
• Compatible with MS Windows NT, 2000, 2003, XP & Vista
  
  *ARM - Advanced Reporting Module is supplied as an add on module

Reporting:- Dynamic Activity Viewer, on box web browser based reporting

• Built in real time Dynamic Activity Viewer allows administrators to watch all web access as it occurs in real time within your organization
• Filter down to watch individual problem users or category surfing (eg sports, Super bowl, soccer etc.). Filter by category, usernames and IP addresses
• Catch offenders instantly as they breach your organizations acceptable usage policy.

Reporting:- Current Day, Real Time and Historical, on-box web browser based Reports

• Current Internet Activity - see the days usage from now back to midnight
• Current Blocking Activity - see who has been caught by your policies
• Current User Name Activity - what particular users/IPs have been doing
• Web based access to display and/or download current and historical log files to MS Excel, Word etc
• Webalizer based Historical reports
• Silent Mode Savings Report
  
  All on-box reporting is web-based, designed to be very easy to use, quick and simple to provide an instant view of what happening now or has happened in relation to Internet usage in the recent past. More sophisticated reporting is available in ARM (see above).

Reporting:- Instant Alerts - with ContentKeeper Monitor :

• Set traps or high watermarks and generate alerts for policy breaches (eg. Adult/Malicious, Sport, Entertainment, Job Search, Malicious content access)
• Popup visual, audio, and email delivery of alerts
• Set traps for individual instances or high watermarks for serious abuse
  
  * ContentKeeper Monitor is supplied as an add on module

Security Features :

• Secure, browser-based management (local and/or remote) via SSL and/or SSH
• Hardened secure linux based operating system - KeeperOS
• Administraion Accesss is Encrypted, Authenticated and supports one time password tokens (RSA)
• Multiple Role based administrative logins (allows delegation)
• Administration audit trail
• All updates and other communications (updates, upgrades, administrations) are encrypted and authenticated
• Automatic Master Slave synchronization for large sites with multiple appliances
• Centralized web based administration
• Compatible with firewalls, proxy servers, caching and other IP network devices
• File download management by file type (customizable and extensible)
• Inbuilt automatic fail-safe High Availability Module (HAM) for critical network installations
• Filter non-proxy based traffic (not visible to and missed by proxy based filtering systems! - hackers usually do not engineer to allow simple proxy based blocking!!)
• Stand-alone device. Removes filter processing load from Proxy/Cache Servers and/or Firewall to provide faster network throughput
• Network Operating System (NOS) independent

Comprehensive SSL Malicious Tunneling Defences with multiple filtering and blocking options:

• Three modes available
  1. Block all SSL and allow a White list only approach (most secure). OR
  2. Certificate Based Filtering with full SSL Certificate Validation and Revocation checking (maintains the integrity of the end to end SSL connection), with multiple controls.
     AND/OR
  3. Full in tunnel inspection of SSL traffic in clear text with Web filtering and Antivirus/Malicious code packet level inspection, including ContentKeeper Category based decrypt bypass controls eg. for E-banking ( ContentKeeper SSL Inspector- and ContentKeeper AV - add on modules).

Live and Current Database with all categories included with the base subscription:

• Collaborative Filtering - automated global collaboration with millions of users contributing in a collaborative fashion to discovery, analysis, categorization, and quality control 24 x7
• Extensive & relevant database covering many millions of classified Internet sites (billions of pages) with extensive coverage worldwide
• Hourly database updates, fully automated (using ContentKeepers TrickleFeed™ technology)
• Centralized Data Centre backend analysis and categorization of Internet sites
• Regular live site checking and Database compaction (removal of dead/moved sites) to avoid database size bloat and maintain relevance and quality
• Manual re-classification, analysis and quality control teams
• Malicious code and threat awareness lab

Real-Time Engine :

• Real-time analysis, blocking and classification engine (M.A.R.I.O.™)
• Automatica (and manual) tunning - learns and categorizes sites visited by your staff. Administrator can add new sites or change categories at will
• Two real time engine operational modes:-
  • Datacentre backend in-depth analysis mode - hourly turnaround on most new sites - insures quality categorization, ideal for enterprises (default mode)
  • 60 second live blocking mode on new sites - quick analysis, ideal for schools, education and very sensitive organizations (great for catching Adult content & Gambling in particular)

Scalability & Large Enterprise integration:

• ContentKeeper scales from 25 users to 200,000 plus users on one appliance.
• Any size installation can be accommodated via load balancing multiple ContentKeeper Appliances
• High Availability built in (software and hardware engineering)
• Fault tolerance built in (software and hardware systems)
• Hot standby automatic failover configurations available
• Central browser based management with automatic MASTER/SLAVE synchronization
  (allows easy management of unlimited numbers of appliances)
• Easy deployment on enterprise LANs and/or across WANs VPNs etc
• Multiple Role based Administration (allows delegation of policy and admin functions)
• Administrative Audit trail - tracks which Admin made what changes
• Dual syslog log file off loader with automatic scheduling
• Daily automated backups
• NTP time synchronization
• Choice of fiber optic or copper interfaces with automatic bypass
  (bypass is onboard for cooper, external bypass available for optical)
• SNMP Linux MIB / HTML page system monitoring built-in

Directory Services Integration and Support:

• Fully integrated with Microsoft Active Directory
• Fully integrated with Novell eDirectory
• Fully integrated with standard LDAP based directory services
• Fully integrated with Microsoft NT40 based environments
• Inbuilt user and group Directory for those without a central directory system
  
  Use Groups defined in your Directory service for ContentKeeper Policies, Reporting and enforcement

User Identification and Group Membership :

• Transparent user identification (no login required, invisible to users)
• Prompted user authentication (login before gaining access to Internet)
• Support for over 40 methods available to cater to all types of enterprise environments
• User identification even in NAT-ed, Proxied, Firewalled, routed, remote network, Internet based user situations (via CK Resolver)
• Usernames matched to group membership in real time
• Full support in dynamic DHCP based environments

Proxy and Cache Server Integration and Support

• ContentKeeper works well in environments with or without proxy and caching servers. All common proxies/caches are compatible
• Basic proxy authentication support
• NTLM proxy authentication support
• Digest proxy authentication support
• Compatible with Microsoft ISA and proxy servers
• Compatible with CISCO, Stratacache, SQUID, Netcache, Cacheflow, Bluecoat etc. devices
• No load impact on proxy or cache servers. Allows for superior network performance.

Anonymous Proxy Bypass & Cloaking Defenses:

• Multiple Configuration defenses against external proxy bypass & cloaking sites.
• Blocking for SSL & SSH encrypted proxy bypass sites.
• Blocking for IP based bypass sites

Safe Search Modes - Search Engine Controls:

• Google forced safe search mode, (AltaVista, Yahoo forced Safe Search modes coming soon)
• Search word text control (block the use of undesirable search terms)
• Google image replacement
• URL argument filtering, including CGI extensions

Protocols:- Policy Based Protocol (block & report) - Chat & P2P:

• MSN Chat, AOL, P2P, Jetcast, Kazza, Shoutcast, Ghostsurf, Secure Instant Messaging protocol, Jabber (several) plus 23 others

Protocols:- Global Protocols (block & report) - File Sharing, P2P, Chat etc.

• Limewire, AOL messenger, AOL File transfer,QQ, itunes, ICQ,Bittorrent, Bitwise, Camfrog, AIM, Windows Live Messenger, MySpace IM Protocol, plus 80 others

Network:

• Compatible with any IP based network environments, Cisco, Checkpoint, Microsoft, Novell, Mainframes, Vax, AS400, Unix, Linux, Apple Macs, etc.
• Transparent/Invisible to other networking devices.
• Full support for multiple VLANS including mix ethernet & VLANs pipes.
• Full support for individual IPs and full subnetting.
• Exclude and Include filering bypass based on individual IPs, subnet and ranges.
• Fault tollerant transparent ethernet bridge.
• On-board automatic ethernet bypass switching.
• Compatible with load balances from RADware, Cisco, Foundry, F5 etc.
• No hacking targets - no theoretical hacking point on bridge ports.
• Secure dedicated management port - can be deployed to a secure management network segment.
• Force online or into bypass mode via web GUI. (with inbuilt Ethernet bypass on ContentKeeper Appliances) .

Support:

• Unlimited phone, chat, Skype. GoToMeeting, fax and email support included within annual subscription
• Fast turn around on most support issues
• Fully qualified, professional and dedicated support team
• Fully automated software upgrades free with annual subscription
• Advanced hardware replacement available (add on cost)
• Extended hardware warranty available (add on cost)
• Qualified reseller channel to provide onsite consulting and/or first line support (add on cost)
• Platinum support available in most locations (guaranteed same business day response - add on cost).

Features: - YES THERE ARE MANY MORE
just too many to list them all here
Please call for more information