Quickstart of WFilter 4.1

From WFilter Documents and Tutorials
(Difference between revisions)
Jump to: navigation, search
(How to set internet policy for monitored computers?)
(A Typical Small Network)
 
(16 intermediate revisions by one user not shown)
Line 1: Line 1:
== Download and Decompress WFilter ==
+
{{DISPLAYTITLE:WFilter ICF Installation Guide}}
<p> Download WFilter and decompress it with WinZip. Double click the exe file to launch the installation.</p>
+
== Install npcap or winpcap ==
<p> You will be asked to choose file-based version or database version. There is no feature difference between the "database version" and "file-based version", except for data storage.</p>
+
WFilter ICF uses npcap/winpcap driver to capture network packets, so you need to install npcap/winpcap before installing WFilter ICF:
<p> For first time using WFilter, you're recommended to choose the file-based version.</p>[[image:Figure_1.1.jpg]]<br>
+
* For Windows 2003 and xp, please install winpcap. https://www.winpcap.org/install/default.htm
 +
* For Windows vista and later, please install npcap. https://nmap.org/npcap/
  
==  Installation Notice ==
+
Npcap installation steps(install npcap in WinPcap API-compatible mode):
 +
 
 +
[[image:npcap01.png|450px]]
 +
 
 +
[[image:npcap02.png|450px]]
 +
 
 +
==  Installation Note ==
 
=== Calculate hard disk space required===
 
=== Calculate hard disk space required===
 
<p> Because monitored data will be kept in your disk, so you need to calculate the required disk space and choose a proper disk to install WFilter.</p>
 
<p> Because monitored data will be kept in your disk, so you need to calculate the required disk space and choose a proper disk to install WFilter.</p>
<p> Required harddisk space is related to monitored computers number and log keeping days, each monitored computer will cost about 2M space per day.</p>
+
<p> Required harddisk space is related to monitored clients number and log keeping days, each monitored clients will cost about 2MByte disk space per day.</p>
=== Installation of WFilter dataBase version===
+
=== Installation of WFilter database version===
<p> If you want to install WFilter database version, you should install database first. WFilter database version supports SQL Server and MySQL database. Please refer to WFilter Database Version Guide.</p>
+
<p> If you want to install WFilter database version, you should install database first. WFilter database version supports SQL Server and MySQL database. Please refer to [http://www.wfiltericf.com/support/WFilter_4_1/Doc/deployment_database.htm WFilter Database Version Guide].</p>
  
 
==  Launching WFilter Console ==
 
==  Launching WFilter Console ==
<p> You can launch WFilter console by clicking the WFilter shortcut on desktop, or run "Start" -> "Programs" -> "IMFirewall" -> "WFilter Console". Or you can type "http://127.0.0.1:9090" in your browser address bar to access WFilter console.</p>
+
<p> You can launch WFilter console by clicking the WFilter shortcut on desktop, or run "Start" -> "Programs" -> "IMFirewall" -> "WFilter Console". Or you can type "http://127.0.0.1:10090" in your browser address bar to access WFilter console.</p>
<p> The default administrator user is "admin", admin password is configured during WFilter installation.</p>[[image:Figure_3.1.jpg.jpg]]<br>
+
<p> The default administrator user is "admin", admin password is configured during WFilter installation.</p>[[image:login.png|1000px]]<br>
<p> For first time using WFilter, you will see the "Configuration Wizard", please modify certain settings following the wizard. Then you can click "online users" to check the monitored devices, as in below Figure:</p>[[image:Figure_3.2.jpg]]<br>
+
<p> For first time using WFilter, you will see the "Configuration Wizard", please modify certain settings following the wizard. Then you can click "online users" to check the monitored devices, as in below Figure:</p>[[image:Figure_3.2.jpg|1000px]]<br>
 
<p> The WFilter computer must be deployed at a single location in the network where it can monitor all internet traffic. Otherwise it can not work properly.</p>
 
<p> The WFilter computer must be deployed at a single location in the network where it can monitor all internet traffic. Otherwise it can not work properly.</p>
 
<p> If no computer appears in "online computers", this is usually because incorrect monitoring adapter settings, please check Monitoring Settings.</p>
 
<p> If no computer appears in "online computers", this is usually because incorrect monitoring adapter settings, please check Monitoring Settings.</p>
 
<p> If WFilter can only monitor itself, this is a deployment issue, please check "How to deploy WFilter?" for more details.</p>
 
<p> If WFilter can only monitor itself, this is a deployment issue, please check "How to deploy WFilter?" for more details.</p>
  
==  Configure WFilter ==
+
 
 +
==  Deploy WFilter ==
 
=== Monitoring Settings ===
 
=== Monitoring Settings ===
 
<p> If no device presents in the "online users", there are two possibilities:</p>
 
<p> If no device presents in the "online users", there are two possibilities:</p>
 
* You haven't have any network activity yet. Please visit some websites and refresh the "Online Users" to check.
 
* You haven't have any network activity yet. Please visit some websites and refresh the "Online Users" to check.
* The monitoring adapter is configured incorrectly. As in "Figure 4.1", please run "system settings"->"check settings" to check current settings and follow the guide to fix the errors.<BR>[[image:Figure_4.1.jpg]]<br>
+
* The monitoring adapter is configured incorrectly. As in "Figure 4.1", please run "system settings"->"check settings" to check current settings and follow the guide to fix the errors.<BR>[[image:Figure_4.1.jpg|1000px]]<br>
===  How to set internet policy for monitored computers? ===
+
===  How to set internet policy for monitored clients? ===
<p> As in picture, click the "User-computer Table". Check the "Enable Monitor" checkbox of the computer you want to monitor. You also can set blocking policy for computers in this page.</p>[[image:Figure_4.2.jpg]]<br>
+
<p> As in picture, click the "User-computer list". Check the "Enable Monitor" checkbox of the computer you want to monitor. You also can set blocking policy for computers in this page.</p>[[image:Figure_4.2.jpg|1000px]]<br>
 +
 
  
 
== How to deploy WFilter? ==
 
== How to deploy WFilter? ==
<p> Introduction</p>
+
=== Introduction===
 
* You only need to install WFilter in ONE computer to monitor the whole network. However, the WFilter computer must be deployed at a single location in the network where it can monitor all internet traffic.
 
* You only need to install WFilter in ONE computer to monitor the whole network. However, the WFilter computer must be deployed at a single location in the network where it can monitor all internet traffic.
 
* There are two different kinds of deployment solutions:
 
* There are two different kinds of deployment solutions:
 
# Pass-by mode: set up a mirroring port in your switch/router, and connect WFilter computer to the mirroring port to do monitoring/filtering.
 
# Pass-by mode: set up a mirroring port in your switch/router, and connect WFilter computer to the mirroring port to do monitoring/filtering.
# Pass-through mode: deploy WFilter in a windows gateway, bridge, or proxy server.</li>
+
# Pass-through mode: deploy WFilter in a windows gateway, bridge, or proxy server.
* For more details, please check: WFilter Deployment Examples.</li>
+
* For more details, please check: [http://www.wfiltericf.com/support/WFilter_4_1/Doc/deployment_example.htm WFilter Deployment Examples].
* The detailed deployment depends on different network topology. Here we take a typical small network environment as an example.</li>
+
* The detailed deployment depends on different network topology. Here we take a typical small network environment as an example.
<p> A Typical Small Network</p>
+
=== A Typical Small Network===
 
* As in Figure 5.1, local computers use a wired router to connect to the Internet. In this type of network, it requires a port mirroring switch to be installed between the router and the switch. And the machine with WFilter installed on shall be connected to the monitor port of the port mirroring switch.<BR>[[image:Figure_5.1.jpg]]<br>
 
* As in Figure 5.1, local computers use a wired router to connect to the Internet. In this type of network, it requires a port mirroring switch to be installed between the router and the switch. And the machine with WFilter installed on shall be connected to the monitor port of the port mirroring switch.<BR>[[image:Figure_5.1.jpg]]<br>
* For better understanding of WFilter deployment, please check: WFilter Deployment Examples.
+
* For better understanding of WFilter deployment, please check: [http://www.wfiltericf.com/support/WFilter_4_1/Doc/deployment_example.htm WFilter Deployment Examples].
 +
 
 +
[[Category:Installation]]

Latest revision as of 13:20, 31 July 2019

Contents

[edit] 1 Install npcap or winpcap

WFilter ICF uses npcap/winpcap driver to capture network packets, so you need to install npcap/winpcap before installing WFilter ICF:

* For Windows 2003 and xp, please install winpcap. https://www.winpcap.org/install/default.htm
* For Windows vista and later, please install npcap. https://nmap.org/npcap/

Npcap installation steps(install npcap in WinPcap API-compatible mode):

Npcap01.png

Npcap02.png

[edit] 2 Installation Note

[edit] 2.1 Calculate hard disk space required

Because monitored data will be kept in your disk, so you need to calculate the required disk space and choose a proper disk to install WFilter.

Required harddisk space is related to monitored clients number and log keeping days, each monitored clients will cost about 2MByte disk space per day.

[edit] 2.2 Installation of WFilter database version

If you want to install WFilter database version, you should install database first. WFilter database version supports SQL Server and MySQL database. Please refer to WFilter Database Version Guide.

[edit] 3 Launching WFilter Console

You can launch WFilter console by clicking the WFilter shortcut on desktop, or run "Start" -> "Programs" -> "IMFirewall" -> "WFilter Console". Or you can type "http://127.0.0.1:10090" in your browser address bar to access WFilter console.

The default administrator user is "admin", admin password is configured during WFilter installation.

Login.png

For first time using WFilter, you will see the "Configuration Wizard", please modify certain settings following the wizard. Then you can click "online users" to check the monitored devices, as in below Figure:

Figure 3.2.jpg

The WFilter computer must be deployed at a single location in the network where it can monitor all internet traffic. Otherwise it can not work properly.

If no computer appears in "online computers", this is usually because incorrect monitoring adapter settings, please check Monitoring Settings.

If WFilter can only monitor itself, this is a deployment issue, please check "How to deploy WFilter?" for more details.


[edit] 4 Deploy WFilter

[edit] 4.1 Monitoring Settings

If no device presents in the "online users", there are two possibilities:

  • You haven't have any network activity yet. Please visit some websites and refresh the "Online Users" to check.
  • The monitoring adapter is configured incorrectly. As in "Figure 4.1", please run "system settings"->"check settings" to check current settings and follow the guide to fix the errors.
    Figure 4.1.jpg

[edit] 4.2 How to set internet policy for monitored clients?

As in picture, click the "User-computer list". Check the "Enable Monitor" checkbox of the computer you want to monitor. You also can set blocking policy for computers in this page.

Figure 4.2.jpg


[edit] 5 How to deploy WFilter?

[edit] 5.1 Introduction

  • You only need to install WFilter in ONE computer to monitor the whole network. However, the WFilter computer must be deployed at a single location in the network where it can monitor all internet traffic.
  • There are two different kinds of deployment solutions:
  1. Pass-by mode: set up a mirroring port in your switch/router, and connect WFilter computer to the mirroring port to do monitoring/filtering.
  2. Pass-through mode: deploy WFilter in a windows gateway, bridge, or proxy server.
  • For more details, please check: WFilter Deployment Examples.
  • The detailed deployment depends on different network topology. Here we take a typical small network environment as an example.

[edit] 5.2 A Typical Small Network

  • As in Figure 5.1, local computers use a wired router to connect to the Internet. In this type of network, it requires a port mirroring switch to be installed between the router and the switch. And the machine with WFilter installed on shall be connected to the monitor port of the port mirroring switch.
    Figure 5.1.jpg
  • For better understanding of WFilter deployment, please check: WFilter Deployment Examples.
Personal tools
Namespaces

Variants
Actions
Navigation
Tools