Using Ccproxy to manage the internet behavior of small businesses

This experiment is illustrated by examples, from the operating conditions, background, requirements, and specific requirements of several parts.

1. Operating conditions:

A virtual machine with a Windows Server 2003 system with a proxy service installed

2. Background:

In order to improve staff productivity and reduce the bad behavior such as online games during work,

An enterprise network administrator wants to be able to standardize the internet behavior of employees by means of proxy service,

To do this, the administrator installs the Ccproxy as the Agent service program.

3. Requirements:

The administrator first wants to be able to control the employee's Internet time. For general employees, their IP address is determined,

Use the assigned proxy account to access the Internet, and for visitors, use the Guest account agent to surf the internet.

The specific limit requirements for each account are:

In addition, the administrator has the following requirements:

(1) In order to avoid conflicts with existing services (80,8080,8443 ports are already occupied), need to adjust the proxy service port;
(2) In order to facilitate management, you need to set up proxy services with the server to start;
(3) In order to record the employee's online behavior, we need to record the title content of the employee's Internet access page.

4. Specific requirements:
(1) Proxy service settings:
Set the new proxy port to 8000, the proxy service starts automatically as a service, and the page title is recorded in the log.
(2) Proxy user settings:
Create a dedicated proxy account for the average user, limit the scope of use (IP address) of the account, and record information about the account (to be stated in the report);
Create a dedicated proxy account for the guest user, limit the scope of use (IP address) of the account, and record information about the account (to be noted in the report).
(3) Proxy rule settings:
Add reasonable filtering rules to prevent users from accessing "*.badsite.com" through proxy, and add scheduling settings to meet the limit requirement of agent account.
(4) Write the agent requirement analysis and Configuration report:
Description: The analysis of the problem, the solution of the ideas and methods.
Description: The customizations in the above configuration, and the rationale for this setting.
(1) Report Please save the "desktop \ Candidate folder \ Analysis and Configuration report. txt" in the real machine

Operation Steps

Step 1. Proxy service Settings

Open ccproxy-Settings

(1) Modify the port of HTTP/RTSP, Secure and FTP (WEB) to 8000.

(2) Set up auto start and start in NT service mode.

(3) in the Advanced-log option, set the Record page title.

Step 2. Proxy account settings (user name and password customization)

(1) Select the allowable range is "Allow section".
(2) New user account, password user, authentication type select "username/password +ip address",

The IP address range is 10.0.1.1-10.0.1.100 and the maximum number of connections is 10.

(3) New Guest account, password guest, authentication type select "User/password +ip address",

The IP address range is 10.0.1.110-10.0.1.120 and the maximum number of connections is 20.

Step 3. Agent rule Settings
(1) New website filter Rules "Userfilter", prohibit the site "*.badsite.com";

(2) New website filter Rule "Guestfilter", tick "Prohibit connection" check box, prohibit download ". exe;. VBS "FILE;

(3) Apply the rule "Userfilter" to the user account, edit the user account, tick the "website filter" checkbox and select the "userfilter" rule;

(4) Apply the rule "Guestfilter" to the Guest account, edit the Guest account,

Tick the "Site filtering" checkbox and select the "guestfilter" rule;

(5) New Time schedule work, configure the agent time for Monday to Friday for "09:00-17:00";

The time period of Sunday and Saturday is "00:00-00:00";

(6) Apply time schedule work for user and guest account.

Using Ccproxy to manage the internet behavior of small businesses