forum.wfiltericf.com

Wifi users can also be monitored by WFilter. This is related to your port mirroring settings.



Can you post a screenshot of your port mirroring settings for us to check?



And what are the ip address ranges of wifi users and wired users?

This deployment can work, but you need two licenses for both WFilter to work. I would recommend another solution: 1. Install WFilter in another server together with the sql server. 2. Mirror the proxy server's traffic to the WFilter server. You can setup a mirroring port in your switch to do this. I...

You can schedule reports in "Standard Reports", however, you can not set the scheduled running time. WFilter system will send the report when it detects a system date change for previous date. If your WFilter server is all day running, the reports will be sent on midnight. Otherwise the reports will...

The "block facebook IM" feature in WFilter only blocks http facebook web chatting. I am afraid there is no way to block https facebook chat without complete blocking of the https facebook access. However, we've tried to find a pattern to block facebook desktop client. The pattern file is attached, p...

As you can see, the 10th bandwidth is 0.408MB in total. It means other false alarm protocols are less than 0.408M.



I recommend you to ignore protocols <1M, because 1MB traffic can not do anything useful in practice.



We will setup a bandwidth threshold of alert trigger in later versions of WFilter to reduce false alarms.

Can you run a protocol bandwidth report to check the bandwidth details of these three patterns?

QQ messenger can produce "QQLive" and "QQDownload" traffic, because QQ messenger has integrated so many features.



But I am not sure why you have "FreeCast", 脱兔下载 and 浩方对战平台.

I believe your switch is connected to your router directly by another cable. Please check your cable connections. There shall have no directly connection between your router and switch, so all traffic will pass through the WFilter computer to be monitored. The topology shall be like: ISP -> Router -...

You don't need to block ports in router in pass-through mode. But blocking ports in router is helpful if the pass-through filtering driver is not working. You can check "Online Computers"->"Online Chatting" to check the QQ ports, if QQ ports are 8000, it means this udp port is not successfully block...

We can block this QQ version in our lab.



Please also block remote udp port 8000 in your router, it is helpful to block QQ.