Knowledge base
Safetica Supervisor
Posted by Dana Balaštíková, Last modified by Dana Balaštíková on 14 October 2020 02:52 PM

Safetica Supervisor is a discontinued module previously available in Safetica Management Console. New users can find alternatives to Supervisor features Application control and Web control here and to Print control here.

Supervisor features allow you to block access to dangerous or illegal websites and the use of unproductive or malicious applications. It can also block the use of non-allowed printers (network, physical or virtual), thus eliminating extensive printing or use of specific printers.

The Supervisor module consists of three main features: Web control, Application control and Print control. They can be turned on or off in the Settings view using the slider in the header.

Switching to WebSafetica

WebSafetica offers a simpler and more modern version of Web control and Application control. Existing users of Safetica Supervisor can switch these features to the web console and deactivate them in the desktop console. Deactivation is necessary to prevent conflicts of settings.

To activate Supervisor features in WebSafetica:

  1. Log in to WebSafetica and go to Policies > Websites or Policies > Applications (based on which feature you want to activate).
  2. Click I want to enable this module in WebSafetica and disable it in Safetica Management Console.

The features will be deactivated in the desktop Safetica Management Console and you will only see a note about the fact that you are using the improved version in WebSafetica.

Categories

You can change the categorization of individual applications or websites in Maintenance > Categories. Just click Browse database and select a category.

Important: Safetica Client checks and remembers the category of a website when you first access it, and this process may take a few seconds. When you access a website from a blocked category, the first access may not be blocked because the category of the website is not known yet. Every following attempt will be blocked correctly. This is a by-design behavior.

Supervisor Web Control

Supervisor Web control allows you to block access to specific websites. You can also block all websites and allow access to a specified list of URLs.

The Web control feature can be set to three default states:

  • Allowed – all websites are allowed by default. You specify what websites or categories are denied in the list.
  • Inherit –setting is loaded from the parent node in the user tree.
  • Denied – blocks all websites except the ones defined in the list.

Caution: These settings apply not only to web browsers, but also to other applications that access the internet. If any of your applications have trouble with updates or other network communication, check the Web control records to see whether this action has not been blocked.

 

How to add a rule

Rules can be configured for a specific website of for a whole category of websites. To add a new rule:

  1. Click Add rule and follow the rule creation wizard.
  2. Choose whether to create the rule by adding a Server Address, Category, or a combination of these. A rule will be applied to websites that match at least one part of it.

Note: When selecting a category, all web addresses that fall into that category are included in the rule.

  1. Choose the mode for the rule:
  • Denied – access to website matching the rule will be denied.
  • Allowed – access to website matching the rule will be allowed.

     4. Click OK and then click  in the upper right corner of the screen.

Server address

For each address in the list, you can choose the level on which the URL rule will be applied. For example, if you enter www.safetica.com, you will see the following options after clicking into the Details column:

  • safetica.com – the rule will only apply to www.safetica.com
  • *.www.safetica.com/* – the rule will apply to safetica.com and all webpages that include this address, e.g.: www.safetica.com/AAA/ or ccc.www.safetica.com/AAA/BBB
  • *.safetica.com/* – the rule will apply to all webpages that include the address .com, e.g.: www.safetica.com/AAA/ or ccc.safetica.com/AAA/BBB
  • *.com/* – the rule will apply to all webpages that include .com, e.g.: safetica.com/AAA/ but also e.g. www.cnn.com
  • *.www.safetica.* – works the same way as previous rules.
  • *.www.* – works the same way as previous rules.

When entering addresses, you can use the wildcard * (asterisk) symbol, which stands for any string. For example, when you enter *auto*, the rule will apply to all addresses that include the string auto.

 

Advanced settings

If you don't want to use the default Safetica blocked site template, you can redirect blocked websites to a webpage of your choice.

  • Default page – the user will see the default Safetica webpage with information about the blocking.
  • Custom page – the user will be redirected to the filled-in address. Enter the address with its protocol (e.g. http://www.example.com).

You can find a video of Web control here.

Learn how to set up an exception from restricted websites for specific users here.

 

Visualization

In the Visualization mode of Web control, you can see records of users that tried to visit specific blocked websites.

Supervisor Application Control

Supervisor Application control provides prevention and protection from launching unauthorized applications and ensures the integrity of controlled applications. You can easily define rules for blocking individual applications or application categories across the entire company.

How to add a new rule

To create a new rule for desktop applications, follow these steps:

  1. Click Add rule. The new application rule wizard will open.
  2. You can block applications using one of three options:
    • Enter path to application – enter the path to the application (local or network) including its process name or use just the process name (e.g. game.exe). When typing the path, you can use the wildcard * (asterisk) symbol which stands for any string. You can use it for example like this:
      • C:/Program Files/* (all applications in Program Files and its subfolders)
      • C:/Users/*/Roaming/*
    • Choose a category – click to open the dialog with application categories. The rule will apply to all applications in the category, including categorized applications from the Microsoft Store.
    • Microsoft Store application – this setting can be used to enable or disable individual apps obtained from the Microsoft Store. The settings apply only to Microsoft Store applications on supported operating systems, i.e. Windows 8 and higher.
  3. Click Finish to confirm rule creation. To save the rule, click  in the upper right corner of the screen.

 

You can find a video of Application control setting here.

Visualization

In the Visualization mode, you can see records of blocked and executed applications, the users that run them, and also other details.

Supervisor Print Control

Supervisor Print control allows you to control selected printers and/or to limit the number of printed pages. You will also learn which protected documents were blocked by Safetica.

Print control on printers

This section is split into two tables. In both of them, there is a list of printers divided into three categories – physical, virtual, or network printers. The right table contains all available printers which are connected to a computer with Safetica Client. The left table contains printers for which you want to set up a rule. You can choose from the following options:

  • Deny list - blocks all printers added to this group (block list).
  • Inherit - this setting is loaded from the parent node in the user tree.
  • Allow list - blocks all printers except the ones added to this group.

You can move printers between the two tables using the arrow buttons. Right-clicking a printer in the right table allows you to rename the printer or change its type (physical or virtual).

In the lower part of the table, you can find a search field. Found text will be highlighted in the table. Clicking the X next to the search field will cancel the highlighting.

Print quota per user

In this section, you can set up detailed printing quotas along with the actions to be taken if the quota is exceeded.

Attention: Quotas do not apply to printing from virtual printers. They are applied only to physical and network printers.

For quotas, you can choose from the following options:

  • Quota period – the duration of the quota: Day, Week, or Month
  • Total number of pages – the total number of pages that can be printed within the period specified above.

                 Action taken after quota runout – here you can choose the action that will be carried out once the quota is exceeded. You can choose from the following actions: Allow current print completion or Send an alert.

(0 vote(s))
Helpful
Not helpful