From UntangleWiki

All Untangle FAQs

Can I use both Web Filter and eSoft Web Filter?

Yes. Just as you can run two anti-virus Software Products, you can run two web filter Software Products. But, unlink with anti-virus Software Products, there isn't much benefit to running both Web Filter and eSoft Web Filter. If you have eSoft Web Filter it is recommended just to run eSoft Web Filter.

Is eSoft Web Filter a better web filter?

The eSoft Web Filter is the same as Web Filter except it is based on eSoft's SiteFilter product/technology. eSoft Web Filter is better than Web Filter in many ways:

• More categories
• Better database
• Dynamic categorization of new sites
• Blocks https/SSL (by IP)

For more information, go to About eSoft Web Filter.

Does ESoft use a lot of memory and CPU?

If your Untangle Server is operating well without ESoft, then you won't see much of a difference if you run ESoft. ESoft doesn't use much memory, and there's very little CPU utilization.

How do real-time updates work in an Untangle Server environment?

Untangle Server keeps a local copy of the ESoft database. If you visit a website that the ESoft database doesn't know about, ESoft phones home to the ESoft service, then writes the new information to the ESoft database.

How long does ESoft cache visited sites?

Several days. ESoft flushes non-frequently used cache. The website that you visit daily will not be cleared from cache.

Can I import Web Filter pass lists into ESoft Web Filter?

Yes, but you can only do so from the command line. You cannot do so from the UI at this time.

Can I add to the categories?

No. ESoft has an extensive list of categories and taxonomy. If you feel there is a category that's missing, let us know.

How should I handle false positives?

You can use pass lists to treat false positives.

Do I get Untangle Reports if I use ESoft?

Yes! If you're using Web Filter, you've probably grown accustom to reports about how well the product in blocking sites. You'll get the same reports with eSoft Web Filter.

Can I use eSoft to block SSL sites?

Yes, eSoft categorizes HTTPS traffic based on IP. This means that if you've blocked "Proxy sites" then even HTTPS proxy sites will be blocked.

I blocked a site but when I visit the site via HTTPS it isn't blocked. Why?

eSoft scans and categorizes HTTPS traffic by IP address because the session itself is encrypted and cannot be scanned. As a result if you add "wellsfargo.com" to the block list and goto "https://wellsfargo.com" it will not be blocked because Untangle can only see the IP address not the hostname (wellsfargo.com). However, if you block the "Finance" category and goto "https://wellsfargo.com" you will notice it does not correctly connect and you can see a block event in the eventlog.

eSoft was blocking an HTTPS site, but I added it to the passlist. It is still blocked. Why?

eSoft does categorization of HTTPS by IP. The hostname and request are encrypted. This means if https://example.com/ is getting blocked, adding "example.com" to the passlist will have no effect because HTTPS is categorized by IP address. If you add the IP address of example.com to the passlist then HTTPS traffic to example.com will be allowed.