Installing GFI WebMonitor as a plug-in GFI WebMonitor

GFI WebMonitor can be installed as a plug-in for Microsoft Forefront Threat Management GatewayA Microsoft product that provides firewall and web proxy services. It also enables administrators to manage Internet access through policies. It is the successor of the Microsoft ISA Server and is part of the Microsoft Forefront line of business security software. (TMG).

Microsoft Forefront TMGMicrosoft Forefront Threat Management Gateway. A Microsoft product that provides firewall and web proxy services. It also enables administrators to manage Internet access through policies. It is the successor of the Microsoft ISA Server and is part of the Microsoft Forefront line of business security software. is a web gateway solution designed to protect users from web-based threats. GFI WebMonitor can complement this functionality. When installed in this environment, GFI WebMonitor enables the administrator to monitor users web traffic in real time.

GFI WebMonitor should be installed as a plug-in for Microsoft Forefront TMG when you want to keep Microsoft Forefront TMG as firewall and proxy while using the web filtering functions of GFI WebMonitor.

With this setup, when users request a webpage or a download over the Internet, the incoming and outgoing traffic generated by the request is received by the Microsoft Forefront TMG, which in turn refers to GFI WebMonitor to use the filtering mechanisms to analyze the request. Once the filtering is complete, the traffic is reverted to the Microsoft Forefront TMG for routing.

NOTE

GFI WebMonitor can only be installed or updated as plug-in for Microsoft Forefront TMG. The Microsoft Internet Security and Acceleration (ISA) Server is not supported.

Firewall rules created in TMG.

When GFI WebMonitor is installed as a plug-in for Microsoft Forefront TMG two new policies are created in the Web Access Policy and Firewall Policy nodes of TMG:

  • GFI WebMonitor - Allow access to local host: used to capture the Internet traffic to be filtered.
  • GFI WebMonitor - Allow Internet access: used to allow the updates for GFI WebMonitor.

NOTES

It is recommended to keep these two policies with the highest priority to ensure that no other TMG policies interfere with GFI WebMonitor activity.

If having problems when downloading updates, check your firewall settings to ensure that exceptions for the URLs used for updates are in place. For more information refer to Firewall settings.

Upgrading from GFI WebMonitor 2013 for TMG

GFI WebMonitor 11 does not support an direct upgrade from GFI WebMonitor 2013. You need to upgrade to GFI WebMonitor version 10 first and then continue with the upgrade to GFI WebMonitor 11.

The complete upgrade process from GFI WebMonitor version 2013 to version 11 has the following steps.

  1. Download and upgrade the 64-bit version of GFI Webmonitor 10.1 and follow the instructions in this article: https://www.gfi.com/support/products/gfi-webmonitor/How-to-upgrade-to-GFI-WebMonitor-10. Do not run the post-install wizard, but continue to the next step.
  2. Upgrade to GFI WebMonitor 11. For more information refer to Upgrading from GFI WebMonitor 10.
  3. Obtain the license key and continue with the post-install wizard. For more information refer to Using the Post-installation Configuration Wizard.