Operational Modes > Bridge Mode:

Administrator Console Settings
If the Web Filter is set up in the bridge mode, the unit will filter all connections between client PCs and the Internet, without stopping each IP packet. The unit will only intercept a session if an inappropriate request was submitted by a client. In this scenario, the Web Filter returns a message to the client and server to deny the request, and a block page displays to deny the client access to the site or service.

When users (Client PCs) make Internet requests, the traffic flows through the network path without interruption. The Web Filter captures the request as the user’s request leaves the network. The Web Filter then determines the action to either block or pass the request. If the Web Filter determines to block the user’s request, a block message is sent to the user and a terminate message is sent to the Internet server.

Bridge mode also allows you to apply all policies to HTTPS requests for specific Google and YouTube servers. This feature is made possible by the hardware setup described below.

Hardware Settings
In the bridge mode, the Web Filter is connected between the LAN hub and the Internet router.

Before being set in bridge mode, a Web Filter unit must be cabled in a special way, as described in the Appliance Installation Guide. In this setup, network traffic passes through the physical appliance, but logically the content is treated as for invisible mode. An exception is HTTPS requests to Google and YouTube servers. These requests are passed to proxy software on-board the appliance. The proxy software decodes the requests.

Some models of appliance support use of a special "bypass" card for bridge mode. With the bypass card installed, you can choose to allow traffic to flow (unfiltered) if there is a problem with the appliance.

Back