Set Default Profile and Main port

This screen is used to set both the default profile and the port used for authentication. By default the port used for authentication is 8080 - the same as the Student profile when used in Port based mode.

This dialog box allows this to be changed and a new default filter profile to be defined. The default profile is used whenever Protex is unable to determine a specific filter profile for the user or device. For example, when a user is using the authentication port but has either not yet authenticated or the user is not in any of the AD groups which have been assigned a specific profile. When Login on Demand is active, for example, the user is not asked to authenticate until they try and access a page which is blocked by the default profile.

Default Profile

This is the profile used if no other match can be found for the user/host. If a user is in an AD group which is not specifically assigned a profile then this is the one that will be used. For example, suppose a school has set up AD authentication and has only created the single assignment of the E2BN:Staff profile to the Staff AD group then all students will receive the default profile. If a second assignment of the E2BN:Sixthform to the SixthForm AD group is made then members of the Sixth form will now receive that profile while all other students continue to receive the default.

When Login on Demand is active the user is not asked to authenticate until they try to access a page which is blocked by the default profile. At this point they are given the option to log in and, if successful, will then browse using their assigned filter profile.

Note that the various methods are applied in the order location, port, AD: in most configurations the ports used for Port based filtering are not the same as the Main (AD) port so there is no overlap in the sense that users will either be directed to a port or AD and will be filtered accordingly. However, it should be noted that Location based filtering will take precedence over the Port allocated.

Landing Page

If the E2BN:Landing fiter profile is set as the default profile then all non-logged in users are redirected to to a landing page that prompts the user for authentication before they can begin browsing. This is particularly useful for BYOD: it means that administrators can allow users to bring in their own devices but prevent any internet browsing until they have been authenticated.

Main Port

This is the port used for authentication. If a browser is set to use this port as its proxy then Authentication will be requested. This may be the same as one of the ports used in the Port based methods but may be less confusing if they are distinct: this is our recommendation. So, for example, the four standard profiles may be assigned to ports 8081-8084 while AD authentication is done on port 8080.

In this case all users connecting on ports 8081-8084 receive the assigned profile and those connecting on port 8080 are required to authenticate themselves and either get the profile assigned to their user group or, if no assignment has been made, the default profile.

Save Changes

Saves to disk the currently selected value(s) as the defaults.

Cancel/Reset

Re-reads to current file from disk and changes made since the last Save Changes are lost.