Setup Network Filter

If you are not a customer, signed up for a 14-day free trial and get started right away. Start by logging in to your Network Filtering Dashboard.

 

Upon first login, you will be automatically placed in the Deployments -> Sites section.
Add a friendly Name and Physical Address for your first location and click Save.

The IP Information field will then appear.
Use the Fill Current IP button to add the IP address of your current network, or specify the IP address(es) of your desired network and click Save.

---

Setup DNS and Test 

We recommend testing with a single computer to ensure basic DNS resolution is possible before applying this change network-wide. 

1. Make sure the public IP address of your network is added in our Dashboard as mentioned in the previous step.
2. Add the Human Firewall IPs as your computer's DNS resolvers and ensure that they are the only configured DNS resolvers.
   
   Hint: Your DNS resolver IPs are listed at the bottom of your dashboard. 
   
   
3. After changing your DNS resolvers, your computer's DNS cache will be reset, and you should visit several webpages to ensure DNS resolution is working. If you are seeing an error page, double check that your public IP address is entered properly into the Dashboard. 
4. Within moments of pointing DNS to Human Firewall, the Reports section of the Dashboard will start populating and displaying your network traffic.
5. Now that DNS queries are flowing, update the root of your network to broadcast the Human Firewall DNS IPs to all of your computers automatically. This can be done by updating your DHCP server's DNS settings. This setting is usually found in your network router. If you need assistance, contact us. We'd love to help! 

---

Setup Filtering Policies

Now that you've confirmed you're using Human Firewall, explore your policy options in the Dashboard. Make sure you update the three foundational areas:

• Categories
• Safe Search
• Threats

You can also fine-tune your filtering by making adjustments to the Whitelist, Blacklist, and Advanced settings.

If you'd like to see how Human Firewall blocks a website, add a test domain to the Blacklist and confirm it's being blocked. If you've recently visited a website you are attempting to Blacklist; clear your browser or system cache first! 

Changes made in the Dashboard take about 60 seconds to take effect.

---

Advanced Deployments

User Agent:
You can configure granular reporting and policies by installing a User Agent on each PC. To setup User Agents, click on Deployments -> User Agents -> Install. You'll need to enter your site's "Secret Key" into the installer. Select a site, and make note of the key for later use. 

User Agents provide the following features:

• Records hostname and local (IPv4) IP address for use in Reporting data.
• Apply Filtering Policies specific to one or many endpoints using Tags.
• Protects computers on foreign networks (roaming).
• Installs SSL root certificate.

Supported Operating Systems: Windows 7, 8, 8.1, 10

Multiple Policies with NAT:
You can have up to 7 different policies using a single egress IP address. This facilitates separate content filtering and/or threat protection policies for different segments of your network, such as guest Wi-Fi, server farms, staff BYOD, and executive devices.

When we receive your DNS queries, we apply the specific policy based on the set of IP addresses used to contact us. We have 7 sets of IPs which all utilize the same global infrastructure.

Within your network, you must configure the devices to resolve the specific set of DNS addresses you have configured in the Dashboard policy.

---

Configuration

Create a new policy in the Policies section of the Dashboard.

When configuring the new policy, click on the NAT IPs tab and select a set of DNS servers from the list.

When a policy has NAT IPs configured, it will appear in the Policies section as shown below.

To ensure the NAT IPs policies and your network devices are configured properly, add a different test domain to the Blacklist for each policy, then ensure the devices see a block page for the specific domain which was set up on their NAT IPs policy.