Quickstart guide to Configuring

WebTitan

1. Install the License

Once you have received the evaluation license by e-mail, you log on to WebTitan
as follows using a browser as admin/hiadmin .
Then navigate via the tabs to System Setup -> Licensing. Click Select License File
to Import and browse to where you have saved the license and then click
IMPORT.

2. URL database download

Once the license has been validated, WebTitan will begin to download the URL
database which contains a list of millions of URLs and their categorization. This
is a one-time operation and will take about 20-30 minutes depending on your
Internet speed.
The status of the database download can be checked on the 'System Overview'
section of the Dashboard (The dashboard is available for selection in the top
right of the UI). When completed, the version number of the database and date
will appear. This is a static page, so refresh the page to check the database
status. When the download is complete you can then proceed to configure your
user's browsers to use WebTitan as their proxy

3. Configure your browser to use

WebTitan
Manual Proxy Configuration
For Internet Explorer choose Tools->Internet Options->Connections->Lan
Settings.
For Google Chrome choose Settings->Show Advanced Settings->Network>Change Proxy Settings , then proceed as for Internet Explorer
For Firefox choose Tools->Options->Advanced->Network->Settings.
Sample Setting for Internet Explorer

WPAD file
Via System Setup -> Autoconfiguration, you can upload a WPAD file which details
the WebTitan proxy settings to your browser.
A sample WPAD.dat file is as follows:
------------------- Start ------------------------function FindProxyForURL(url, host){
if (
isInNet(host, "10.0.0.0", "255.255.255.0") ||
isPlainHostName(host) ||
localHostOrDomainIs(host, "127.0.0.1") ||
dnsDomainIs(host, ".company.local")
)
return "DIRECT";
else if (isInNet(myIpAddress(), "10.0.0.0", "255.255.255.0"))
return "PROXY <Webtitan Address>:8881";
}
----------------------- End -------------------------

This indicates that if the url request is to the internal network 10.0.0.0/24 then
the WebTitan proxy is bypassed. If the url request is to any other network and
comes from the internal network, then the WebTitan proxy is used.
You can then set the users browser to Auto-detect proxy settings for this
network or enter http://<The URL of WebTitan>/wpad.dat into the Automated
Proxy Configuration field of the browser options or preferences section.
See also http://en.wikipedia.org/wiki/Web_Proxy_Autodiscovery_Protocol

GPO (General Policy Option)

If you are using a Windows Domain Controller you can enter the Internet
Explorer Proxy Settings in the GPO tool and they will be pushed out to all users
with that policy.
On your domain controller, open your Group Policy Options by typing
'gpedit.msc' into 'Run'.

Navigate to 'User Configuration > Windows Settings > Internet Explorer

Maintanance > Connection' and double click on 'Proxy Settings' now you need to
tick 'enable proxy settings' and put the IP and port of WebTitan in the fields
provided. We also recommend you tick the 'do not use proxy server for local
addresses' box. Once these settings have been saved you can open a command
line and type the command gpedit /force this will push the new proxy settings
out quicker.

4. Some Configuration Tips

4.1 Policies
By default all users will be assigned the default policy. To see the available policies
in WebTitan, navigate via the tabs to Policies->Filtering Policies.
You can add new policies or amend existing policies as required. Three policies are
provided at installation, which are 'Default', 'Administrators' and 'Deny everything'.
These can be seen below.

4.2 Users & Groups

If you have an existing Active Directory or LDAP server, then you can import the
users and groups from that server via User & Groups->Users.
You can also create your own users and groups manually.

A user is assigned one or more group(s) and a group can be assigned to

one and only one policy.

The browsing privileges of the user will be defined by the most permissive
setting of the combined policies.

4.3 Authentication
You can authenticate a user to use the proxy by:

IP address

LDAP

IP address and LDAP

NTLM (NT Lan Manager) - in this case once the user has authenticated via
his Domain Controller he will be automatically authenticated to use the
WebTitan proxy.

IP address and NTLM

This authentication is set up through the System Setup ->Authentication tab.

4.4 Limiting HTTP traffic to WebTitan

To ensure that all HTTP traffic is being controlled by WebTitan, port 80 should
be closed to all traffic with the exception of the WebTitan proxy.

5. The Dashboard
When you log on first to WebTitan you will see the dashboard as below: This
provides a snapshot of activity displaying the web sites that are being blocked by
your polices, the ones users are accessing and the overall web traffic.

6. Trouble Shooting
Via Support you can enable a Secure Remote Support Connection to WebTitan
support. This requires 8822 tcp to be enabled outbound. You can also e-mail
helpdesk@webtitan.com.
If a user is trying to access a url which is blocked by a policy, they will see a
WebTitan browser page explaining the reason for the error. This page can be
customized via Settings->Interface Settings. A sample page is as follows.