software licenses/upgrades

WebMonitor 2009 For WebFilter, 1000-2999 Users, 3 Years Internet Monitoring, Web Security and Internet Access Control Software

esmResearch by IDC shows that up to 40% of employee Internet access is non-work related. While shutting off Internet access is impractical, Internet monitoring and access control software enables network administrators to reduce unproductive Internet use: GFI WebMonitor™ helps you boost employee productivity by giving you the ability to monitor and control Internet access in real time, ensuring that employee web browsing activity is aligned with business needs, and that any files downloaded are free of viruses and other malware.

Granular Internet monitoring

GFI WebMonitor’s Internet monitoring capabilities provide visibility into what sites your users are browsing, how much time they are spending and how much bandwidth they’re consuming. It also provides interactive drill-down capabilities, showing you the site categories being visited by particular users, how much time and bandwidth is being consumed, and more. This is often the first step towards formulating an effective Internet Usage Policy that meets your specific business needs.

Web filtering with time, bandwidth and category based policies

GFI WebMonitor lets you define web filtering and web browsing policies to help enforce an effective Internet Usage Policy. Administrators can allow or restrict access to different website categories as well as setting time or bandwidth thresholds, on a per user or per IP basis. GFI WebMonitor’s extensive site categorization database, with coverage of over 260,000,000 domains that are updated daily, enables you to manage what sites your users can browse while blocking access to websites in particular categories, such as adult materials, gaming, personal email, P2P, social networks like Facebook and MySpace, and more.

Web security to protect against viruses, spyware, phishing scams and other malware

GFI WebMonitor also offers web security features that allow you to define policies which control what type of files your users can download – blocking dangerous file types such as executables and others like MP3s, on a per user or per IP basis. GFI WebMonitor uses multiple antivirus engines to scan all downloads for viruses, spyware and malware, and lowers the risk of social engineering by blocking access to phishing websites. It also allows you to monitor and block MSN/Live Messenger chat sessions and file transfers while its HTTPS scanning ensures that users do not bypass your web security measures by downloading files through an HTTPS-encrypted channel.

Why use GFI WebMonitor?

- Increase productivity and reduce cyberslacking – time wasted by employees online – through granular monitoring and management of employee web browsing habits;
- Formulate and enforce an effective Internet Usage Policy;
- Maximize available bandwidth by controlling what type of sites can be visited, setting time and bandwidth thresholds, and through proxy caching;
- Protect the network from dangerous downloads in real time by managing what type of files users can download and benefitting from multiple antivirus engines to scan for viruses and other malware;
- Block socially-engineered phishing scam websites and prevent data leakage through such sites;
- Scan HTTPS-encrypted traffic for additional security.

Features

Top Features

- Granular user/site/bandwidth monitoring with interactive drilldown;
- Monitoring and blocking of connections in real time;
- Time- and bandwidth-based web browsing policies;
- Website category-based web filtering policies using WebGrade™ database with coverage of 260 million URLs;
- User/Group/IP-based download control policies to control which file types users can download;
- Scanning of downloaded files via multiple antivirus engines - Norman and BitDefender included by default, Kaspersky is optional;
- Protection against socially engineered phishing websites;
- MSN/Live Messenger control;
- New! Anonymization of personal data;
- New! Enforcing of SafeSearch;
- HTTPS scanning;
- Top Policy Breakers.

Other Features

- Web proxy caching;
- Security controlled access to the configuration and monitoring interfaces;
- Exceptions through whitelist and blacklists;
- Monitor and block applications' hidden downloads;
- WebGrade online lookups;
- Web filtering policy exceptions;
- Support for virtual environments;
- Assistance in mitigating legal liability.

GFI WebMonitor™ is available in three editions:

- WebFilter Edition: Includes time- and bandwidth-based browsing control, as well as website categorization and URL filtering;
- WebSecurity Edition: Includes download control, virus scanning through multiple anti-virus engines, anti-phishing and MSN/Live Messenger control;
- UnifiedProtection Edition: Combines both WebFilter and WebSecurity editions.

The features below are available in all editions. Features available exclusively in a particular edition are listed further down on this page.

Controlled Access to the Configuration and Monitoring Interface
GFI WebMonitor allows you to select which users can access the program’s configuration and monitoring interfaces. You can assign rights based on either the IP of the computer from which access is being made or the domain-authenticated username of the client trying to load the configuration. Only users in GFI WebMonitor’s authorized users or IP list will be given access.

Monitor or Block a Connection in Real TimeMonitor or Block a Connection in Real Time
Administrators can see what websites users are currently browsing and what files are being downloaded. An active connection, browsing session or download can easily be blocked, simply by clicking the block connection icon. This proves very useful if you need to interrupt the download of an overlarge file.

Top Policy Breakers
GFI WebMonitor reports details on all users who were stopped by GFI WebMonitor from breaching your company's Internet Usage Policy. Such breaches may include browsing restricted sites, downloading of malware infected files or file types that are blocked through download control policies.

Monitor Hidden Downloads
GFI WebMonitor can be configured to display a download progress window while a file is being downloaded and scanned. The file can then be obtained by clicking the ‘Save’ button in the download progress window. Some pieces of malware rely on the ability to download further files from the web to complete their infection of a computer. Not being aware of the GFI WebMonitor download progress window and not being able to get past it, such pieces of malware are blocked in their tracks. Download progress windows for which the file is not retrieved can be monitored so as to identify infections with such malicious applications performing “hidden downloads” – which can include Trojans, spyware and others.

Allow Exceptions Through Whitelist and Blacklist
Any URL or user or IP can be added permanently or temporarily to the whitelist or blacklist which will supersede all web filtering and web security policies. For example, you could temporarily grant access to a particular user for his or her personal webmail account for a specified period of time, say over employee lunch breaks.

Proxy Caching
GFI WebMonitor implements caching, such that files and other objects/resources are delivered to the end-user from a cache on the GFI WebMonitor machine when possible, thus improving performance and reducing bandwidth consumption.

HTTPS Scanning
GFI WebMonitor can decrypt SSL-encrypted web traffic, scan its contents for malware, and re-encrypt it. This extends the granularity of filtering and control offered by GFI WebMonitor through download control and virus scanning policies to such encrypted traffic.

New! Anonymization of Personal Data
In some countries, notably Italy and Germany, the law requires that any personally identifiable information is not easily available, and should be revealed only under certain circumstances (e.g., investigation by relevant authorities). GFI WebMonitor helps comply with this law – there is an option to enable anonymization of personal data, which makes all personal data in reports visible only by using the four-eye principle (which requires at least two people to witness/approve a certain activity).

Support for Virtual Environments
Organizations that are currently using or plan to use virtualization on their network can still install and use a range of GFI products with confidence. GFI WebMonitor supports and runs on the most common virtualization technologies in use, namely VMware, Microsoft Virtual Server and Microsoft Hyper-V.

Features of GFI WebMonitor - WebFilter Edition

Time-based Browsing Policies
With GFI WebMonitor, an administrator can define policies based on browsing time. For example, the administrator can allow User X to browse news category sites for only one hour per day. When users exceed their time allowance threshold, a notification page is displayed informing them that their allowed browsing time has been used up. Such policies can be defined for specific websites or entire categories of websites.

Bandwidth-based Browsing Policies
The administrator can also define policies based on bandwidth thresholds. For example, the administrator can allow User X to download a maximum of 100 MB per week. When users exceed their bandwidth threshold, a notification page is displayed informing them that their bandwidth quota for the defined period has been reached. These policies, too, can be defined for specific websites or entire categories of websites.

WebGrade™ Database Coverage of over 260m URLs
GFI WebMonitor allows you to define web browsing policies restricting access to particular categories of websites to time or bandwidth thresholds of your choice, on a per user or per IP basis.

The WebGrade database offers coverage of over 260 million domains and extensive URL coverage across multiple languages. Due to the constantly changing nature of the web, GFI WebMonitor also queries GFI servers for categorization of URLs that are not found in the local cached database. If a URL is found to be uncategorized, it is processed by the server and added to the database. Click here to learn about the URL classification process for the GFI WebMonitor WebGrade Database

New! Enforcing of SafeSearch
With GFI WebMonitor it is possible to mandate SafeSearch on search engines. This option is typically customizable at the user level, i.e., the user can disable it, however, when enabling this feature, the personal option will be overridden and the one mandated by GFI WebMonitor will be used instead. This feature is particularly useful in educational institutions where objectionable material should never make it to the user’s browser through Search Engine result pages.

WebFilter Policy Exceptions
Apart from a generic blacklist/whitelist, the administrator can also define site exceptions for each particular policy. A typical example will be to block all news sites except www.cnn.com.

Mitigate Legal Liability
Without the ability to exercise some form of management over what your users are browsing, you leave yourself open to legal liability in a variety of ways. Provide your employees with safe, well managed access to the Internet while on your premises and you will safeguard your company, your employees and your bottom line.

Features of GFI WebMonitor - WebSecurity Edition

User/Group/IP-based Download Control Policies - Manage which File Types Users Can Download
You can create multiple user/group/IP-based download control policies to reflect the organization’s security policies, blocking the download of particular file types (such as Javascript, MP3, MPEG, exe, and more) for particular users, groups or IP addresses. Dangerous files (for example, Trojan downloader programs) often attempt to penetrate a system masked as an innocuous file. GFI WebMonitor analyzes and detects the real file types HTTP/FTP file downloads.

User/Group/IP-based Download Control Policies - Manage which File Types Users Can Download
You can create multiple user/group/IP-based download control policies to reflect the organization’s security policies, blocking the download of particular file types (such as Javascript, MP3, MPEG, exe, and more) for particular users, groups or IP addresses. Dangerous files (for example, Trojan downloader programs) often attempt to penetrate a system masked as an innocuous file. GFI WebMonitor analyzes and detects the real file types HTTP/FTP file downloads.

Scan Downloaded Files with Multiple Antivirus Engines

GFI WebMonitor uses multiple virus scanners to protect you against inadvertently downloading malicious files. Using multiple scanners reduces the average time taken to obtain the latest virus signatures, greatly reducing the risk to your site by each new virus. Also, since each engine has its own heuristics and methods, each brings its own unique strength in detecting and correcting for the ever-increasing variety of viruses. Overall, more antivirus engines mean more virus protection. GFI WebMonitor is bundled with the Norman and BitDefender antivirus engines. It automatically checks and updates the Norman and BitDefender definition files as they become available. The GFI WebMonitor price includes updates for one year.

To achieve greater security and enhance the benefits gained by scanning via multiple antivirus engines, users can add the Kaspersky SuperSecure antivirus engine, available as an optional add-on. The Kaspersky SuperSecure database includes support for the detection of malicious software that can perform remote administration, key logging, password detection, automatic dial-up to paid sites, and more. GFI WebMonitor automatically checks and updates the Kaspersky definition files as they become available.

Protect Against Socially Engineered Phishing Websites
Phishing is a social engineering technique that is used by malicious hackers to acquire personal information such as usernames, passwords and credit card details. These sites are designed to lead users to believe that they are passing on their details to a genuine company. Online shopping and credit card companies are among the most targeted phishing websites. GFI WebMonitor protects users from the potential risks of social engineering by blocking access to phishing websites. This is done through the use of an auto-updatable database of phishing URLs.

MSN control
Monitor and block MSN and MS Live Messenger incoming and outgoing messages through GFI WebMonitor’s IM Control Policies.

GFI WebMonitor for ISA/TMG
GFI WebMonitor is also available as a dedicated plug-in for Microsoft’s Internet Security and Acceleration (ISA) Server and Threat Management Gateway Server (TMG). GFI WebMonitor seamlessly integrates with ISA/TMG, complementing the powerful firewalling features while giving IT Administrators the ability to get a much clearer picture of what type of traffic is being filtered, what type of Internet requests are being sent to the server and the ability to apply policies and rules based on IP, user or groups.

You're in Great Company...
Thousands of companies have chosen GFI WebMonitor.

Case Studies/Testimonials

Check out What Our Customers Have to Say about GFI WebMonitor & GFI WebMonitor for ISA/TMG

Hopkins Homes Ltd.
Hopkins Homes Ltd. operates in the residential development industry in the East Anglia region in the United Kingdom. The company required a monitoring solution that would prevent employees from downloading illegal or malicious files that could compromise the organization’s network. The company has already implemented other solutions from GFI’s security portfolio to protect their network from spam, viruses and to pinpoint vulnerabilities on the network – GFI MailSecurity™, GFI MailEssentials™, GFI WebMonitor™ and GFI LANguard™ respectively and therefore chose to add GFI WebMonitor™ to their range.

Skills, Inc.
Skills Incorporated strives to create and maintain a stable and rewarding place of work where persons with disabilities use their skills and form part of a working and business community. The company wanted to ensure that their computers and network were free of any malicious or illegal files downloaded from the Internet and at the same time prevent employees from accessing inappropriate sites during their shifts. When they upgraded to Microsoft ISA Server, the company required a product that was designed for this setup unlike the web filtering software they were using. Skills Inc. chose GFI WebMonitor which integrates seamlessly with ISA Server though a dedicated plugin.

United Products Corp.
United Products Corp. is a wholesale distributor of exterior building materials with several locations throughout the upper Midwest in the USA. The company was after an internet monitoring solution that would safeguard its server and network from any potential web-borne viruses and malicious downloads, whilst also having the ability to monitor their employees’ browsing habits to ensure that they aren’t wasting time on non-work related websites. The company also wanted an email archiving solution to be able to store their emails in a central and secure location.

Durban Girl’s College
Durban Girl’s College, located in Durban KwaZulu-Natal, South Africa is a private school for girls with weekly boarding facilities. The school wanted to implement web monitoring software for three main reasons: to protect students and staff from illicit websites; to manage their internet cap and to balance internet productivity and recreation. Having tried other web monitoring solutions, none of which they found to be successful, they opted for GFI WebMonitor after it was recommended by another user.

Trussbilt
Trussbilt is an American company that supplies security installations at most US detention facilities. They are also suppliers to foreign countries and have a commercial line that provides protection from security threats. When the company changed owners they immediately saw the need to implement an email and internet access plan as well as provide the required infrastructure to protect data that was confidential and critical to company operations.

American Hakko Products, Inc.
American Hakko Products, Inc. required a software solution that allowed them to manage and monitor the use of the Internet for non-business reasons and to provide an additional layer of security against viruses due to the increasing number of Internet users in the company. Therefore they decided to install GFI WebMonitor™ to solve these two issues, having already had positive results from other GFI products.

Dragon Computer Remarketing
Dragon Computer Remarketing Ltd. wanted to ensure that their employees weren’t wasting time browsing the Internet during working hours and decided to install GFI WebMonitor for ISA Server to have greater control over the level of Internet access allowed.

Yamaha
The multiple antivirus engines in GFI WebMonitor for Microsoft ISA Server has produced striking results as its engine updates can detect worm and phishing websites immediately. This clearly showed that GFI's multiple antivirus engine approach is effective to secure companies' networks from the spread of viruses.

Phoenix Consulting & Technology
I just found the GFI WebMonitor for ISA 2000/2004 and it is the greatest thing since sliced bread! You guys have solved some headaches over spending time running ISA reports to isolate "bandwidth hogs". I installed Version 2 on a client's network and he is already having fun telling users to shut off the streaming Internet radio stations! While searching the Forum for a solution to a problem - which turned out not to be a problem - I found the link to GFI WebMonitor Version 3 and installed the beta version. It looks good. More great work, guys.

Karnet Broadband Satellite Solutions
I have been using GFI WebMonitor for ISA Server since your initial versions but indeed, what I want to say is that you have done a very good job in making such excellent software. I appreciate your effort, the latest version of your software deserves five stars. The antivirus, the Star Rating, the URL, User History have helped to solve many of the problems arising on my network. I would like to say a bundle of thanks to you and wish you best of luck for the future releases of your software. Keep it up!

Notre Dame Regional Secondary School
I use GFI WebMonitor in a school network environment. Our servers handle internal Internet traffic for our students and staff, but they also handle about two dozen websites. The product lets me get a quick snapshot of Internet traffic on those servers. As far as I know, short of going into the ISA Server traffic logs themselves, there's no other way to get such a snapshot in what's essentially real-time.

Independent Software, Inc.
Plain and simple, the GFI MailEssentials, GFI MailSecurity, and GFI WebMonitor for ISA Server combination provided both the front and back door security our small business needed; and they provided it within a small business budget. Through the use of GFI's products, we have all but eradicated SPAM and viruses flowing into our mail servers. Where we once received a daily intake of 3,000+ SPAM messages, we occasionally see one or two messages now. Running a small business requires you to wear a lot of hats. GFI made it possible for me to wear one less hat and concentrate on what I do best, and that is running my business."

Awards/Reviews

GFI WebMonitor for ISA Server voted ISAserver.org Reader's Choice Award Winner
GFI WebMonitor for ISA Server was selected the winner in the ISA Monitoring and Administration category of the ISAserver.org Readers' Choice Awards - ISAserver.

Best Channel Product 2009 Award
Five Best Channel Products Awards organized by Business Solutions Magazine have been given to GFI's products. GFI rated exceptionally well in the Network Security category and very high in terms of ease of upgrade and VARs’ ability to service the product. The winning products are: GFI MailArchiver, GFI MailEssentials, GFI EndPointSecurity, GFI WebMonitor and GFI MAX RemoteManagement, the latest offering from GFI specifically for VARs, MSPs and IT support companies.

Four-Star-review
GFI WebMonitor for ISA Server receives four stars in a review in SC Magazine. The product is a comprehensive monitoring tool and is extremely useful to add features that are missing from Microsoft ISA Server.

GFI WebMonitor wins award in the Content Security category
GFI WebMonitor™ has been selected the winner in the Content Security category of the ISAserver.org Readers’ Choice Awards, organized by the leading Microsoft ISA Server resource site. The award serves as a mark of excellence, providing the ultimate recognition from peers within the industry.

- Web monitoring and antivirus solution tops the Access Control category
GFI WebMonitor™ has been selected as the best solution in the ISA Monitoring and Management category on ISAserver.

Network Product Guide Award for GFI WebMonitor
GFI WebMonitor™ for ISA Server has been named the winner of the 2008 Best Products and Services Award in the web filtering category by Network Products Guide, a Silicon Valley Communications publication on technologies and solutions. - NetworkProductsGuide, August 2008
scmag.

Competent ISA add-in
In a comparative review of Web Content Management in SC Magazine, GFI WebMonitor™ WebFilter Edition is given four stars out of five. The reviewer says that the product plugs right into ISA Server very easily and adds some nice filtering capability. He says it is “a competent add-in for MS ISA Server at a very good price”.

Pricing

GFI WebMonitorTM is a subscription-based product which can be licensed and/or renewed on a 1-, 2-, or 3-year basis. It is licensed by Seats accessing the internet. A subscription for GFI WebMonitor includes the Main Product, maintenance and the base Update Component*. There are three (3) editions of GFI WebMonitor:

- WebFilter Edition: Subscription includes URL filtering and website categorization;
- WebSecurity Edition: Subscription includes Base Antivirus and Anti-Phishing;
- UnifiedProtection Edition: A product Suite composed of both the WebFilter Edition and the WebSecurity Edition.

The Base Antivirus Update Component includes: Norman and BitDefender.

The prices listed below apply to both the standard version of GFI WebMonitor and to GFI WebMonitor for ISA/TMG, a dedicated plug-in for Microsoft ISA/TMG only.