# 4.4. Setup - Traffic Rules

# Firewall

---

#### Principle of Operation

One of the main means of traffic management on the server is a firewall. It helps to limit user traffic:

- From LANs to external ones via the server.
- Between different LANs of the server.
- To the SafeUTM server.

The principle of operation for a firewall is as follows: it analyzes headers of packets passing through the server interfaces. This low-level task is solved by a gateway based on the TCP/IP protocol stack. This is why a firewall is well-suited for determining global traffic management rules for network protocols, ports, belonging to certain IP networks, and other criteria based on values of fields in network packet headers.

<p class="callout warning">The firewall is not designated to solve problems related to controlling access to internet resources based on URL address, domain name, or website content type. These higher-level tasks usually related to web traffic are solved with the help of the [**Content Filter**](https://docs.safedns.com/books/44-setup-traffic-rules/page/content-filter) module.</p>

The firewall is configured in the web interface section **Traffic Rules -&gt; Firewall**.

<p class="callout info">SafeUTM has pre-configured and automatically enabled system rules. They provide protection for proxy and reverse proxy, mail server services, and others. As a rule, it is not necessary to additionally configure protection for the SafeUTM server with the help of user-defined rules. Use them to filter LAN traffic and publish resources. Even when the user firewall is disabled in the web interface, system rules continue to work.</p>

In case incorrect rules have been created (for example, access to the SafeUTM web interface has been prohibited), you can disable the user firewall from the local server menu. To do this, select **Disable user's firewall**, enter **8,** and press **Enter.  
[![1. Firewall.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/uqGx2Nd213Aj1UcA-1-firewall.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/uqGx2Nd213Aj1UcA-1-firewall.png)**

---

#### Automatic SNAT

**NAT (Network Address Translation)** is a mechanism in TCP/IP networks that allows you to convert the IP addresses of transit packets. [**Read more**](https://en.wikipedia.org/wiki/Network_address_translation).

The **Automatic local SNAT** setting enables the automatic translation of the address for traffic going to the external interface in the firewall if the source is 10.0.0.0/8, 172.16.0.0/12 192.168.0.0/16 and addresses that are registered in the **SNAT** tab if the **SNAT Action** is selected. This way you don't have to create such rules manually and change them when you add or change local networks.  
[![2. Firewall.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/f9Hq4MgLl1xNrCYn-2-firewall.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/f9Hq4MgLl1xNrCYn-2-firewall.png)

Disable this setting if there is a need for access from external networks (for example, DMZ) to SafeUTM LAN without NAT.

You can create SNAT rules manually for those who need them and disable them (by the "Not SNAT" rule) for those who need to be allowed into the network without network address translation.

---

#### Firewall Tables

<p class="callout success">Rules in the table have priority from top to bottom (i.e., the upper rule has priority over the lower one).  
Before creating rules for networks, IP addresses, or IP address ranges, first, create them in the [**Objects**](https://docs.safedns.com/books/44-setup-traffic-rules/page/objects) section.  
</p>

For the convenience of rule management, they are divided into four tables:

- **FORWARD** – rules in this table apply to traffic passing between the server interfaces, (i.e., the internet and LAN, as well as between LANs). This is the main table to which rules that restrict user traffic can be added.
- **DNAT (port redirection)** – the rules of this table are used to redirect ports from the external interface to certain resources in LAN. Such rules are often called port forwarding rules (port forwarding, portmapper).
- **INPUT** – a table for rules of incoming traffic to the server interfaces. As a rule, it is traffic for server services (for example, a mail server).
- **SNAT** – a table of rules for managing the translation of network addresses.

<p class="callout warning">It is strongly NOT recommended to create a FORWARD or INPUT rule that blocks all traffic.</p>

---

#### Protocols

When creating a rule, you need to select the data transfer protocol that the rule you are creating will apply to. If you select **Any** from the list of options, the rule will apply to all traffic.  
[![3. Firewall.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/65jQ6cvNdLOQG2UF-3-firewall.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/65jQ6cvNdLOQG2UF-3-firewall.png)

<details id="bkmrk-descriptions-of-each"><summary>Descriptions of each protocol from the list</summary>

- **UDP** - It is one of the simplest transport layer protocols of the OSI model. Does not guarantee packet delivery. This allows for much more quick and more efficient delivery of data for apps that require high bandwidth or a short data delivery time.
- **TCP** - Performs the functions of a transport layer protocol of the OSI model. Unlike UDP, TCP guarantees packet delivery.
- **ICMP** - It is mainly used to transmit error messages and other exceptions that occur during data transmission.
- **GRE** - This protocol is used to encapsulate the network layer packets of the OSI model into IP packets. The number of the protocol in IP – 47. It is mainly used when creating a VPN (Virtual Private Network).
- **AH** - A protocol protecting transmitted data in IPsec. Provides identification, integrity check, and protection from information reproduction.
- **ESP** - A protocol protecting transmitted data in IPsec. Provides identification, integrity check, and protection from information reproduction. **Unlike the AH protocol, ESP encrypts data**. When working with ESP, both end systems use a common key to encrypt data.

</details>---

#### Creating Firewall Rules

To create rules in the desired table, click the **Add** button in the upper left corner of the screen.

Specify the required parameters and actions for the rule and click the **Save** button. The rule will be added to the end of the list. If necessary, change its priority with the buttons.

When creating rules for filtering web traffic from local networks (80, 443 TCP ports), the **Any** object must be specified in the **Incoming interface** field for the rule to work properly. If a different incoming interface is specified, the rule will not process web traffic.

<details id="bkmrk-firewall-rules-by-de"><summary>Firewall Rules</summary>

By default, **ALLOW** policy is used. If you do not create prohibiting rules, all ports and protocols for users will be allowed.

Firewall rules parameters:

- **Protocol** - Data transfer protocol (UDP/TCP/ICMP/GRE/ESP/AH or **Any**)
- **Source** - IP address of the source (src) of traffic passing through the gateway. IP addresses, IP address ranges, networks, or domains can be specified in the field. Data is taken from [**Objects**](https://docs.safedns.com/books/44-setup-traffic-rules/page/objects) specified by the user. Users and groups can also be used as a source (when changing their IP addresses, the firewall will automatically take it into account).
- **Destination port** - Specified when creating a rule with TCP/UDP protocols. It can be a single port, a list of ports, or a range of ports defined in [**Objects**](https://docs.safedns.com/books/44-setup-traffic-rules/page/objects).
- **Incoming interface** - UTM interface that traffic will come into.
- **Outgoing interface** - UTM interface that traffic will come out of.
- **Time of action** - The duration period of the rule. Time intervals (for example, **working hours)** are specified, which are defined in [**Objects**](https://docs.safedns.com/books/44-setup-traffic-rules/page/objects).
- **Action** - Allows or prohibits traffic.
- **Comment** - Any text explaining the purpose of the rule. Maximum 255 characters.

##### Actions

The values of the Action parameter:

- Deny - Prohibits traffic
- Allow - Allows traffic
- DNAT - Translates destination addresses, thus redirecting inbound traffic. Below, in the field **Change destination IP address,** you can specify one IP address or range (when specifying a range of IP addresses, the packet will be redirected to any of them). Similarly, if you specify TCP or UDP when creating the rule, the field **Change destination port** will appear. With this feature, you can transparently redirect inbound traffic to another address or port.
- Don't use DNAT - Cancels DNAT for traffic meeting the rule criteria.
- SNAT - Translates source addresses
- Don't use SNAT - Cancels SNAT for traffic meeting the rule criteria.

</details>---

#### Examples of Rules and Techniques

<details id="bkmrk-port-mapping%2C-dnat%2C-"><summary>Port mapping, DNAT, server publishing in LAN</summary>

Examples of these settings are described in detail in the corresponding articles in the [**Publishing Resources**](https://docs.safedns.com/books/49-setup-publishing-resources) section.

</details><details id="bkmrk-blocking-various-res"><summary>Blocking various resources by means of a firewall</summary>

Issues of blocking various resources – remote control software (AmmyAdmin and TeamViewer), messengers, and other software are described in the [**Blocking Popular Resources**](https://docs.safedns.com/books/6-instructions-and-troubleshooting/page/blocking-popular-resources) section.

</details><details id="bkmrk-%C2%A0"><summary>Access to the terminal server for a specific user</summary>

1\. In the **Forward** tab, click **Add**  
2\. Fill in the following fields:

- **Protocol** - select TCP
- **Source** - select a user or user group
- **Destination** - specify the address of the terminal server
- **Destination ports** - specify port 3389
- **Action** - Allow  
    [![5. Firewall.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/KebBOyeeyZqN7Wvs-5-firewall.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/KebBOyeeyZqN7Wvs-5-firewall.png)

3\. Click **Save**.

</details>

# Application Control

The module implements in-depth traffic analysis (Deep Packet Inspection - DPI) to reveal protocols of popular apps (layer-7 filtering).

---

<p class="callout info">App control works only in the Enterprise edition for users with an active subscription to updates and technical support, as well as in the SafeDNS SMB edition with the purchased module. The list of compatible network adapters with which this model works for certain can be seen in the [**Installation Process**](https://docs.safedns.com/books/3-installation/page/installation-process) section.  
The [**Intrusion Prevention**](https://docs.safedns.com/books/44-setup-traffic-rules/page/intrusion-prevention-system), [**Application Control**](https://docs.safedns.com/books/44-setup-traffic-rules/page/application-control), and [**Traffic Shaping**](https://docs.safedns.com/books/44-setup-traffic-rules/page/traffic-shaping) rules do not handle traffic between LANs and branch networks.  
</p>

<p class="callout success">See the [**Blocking Popular Resources**](https://docs.safedns.com/books/6-instructions-and-troubleshooting/page/blocking-popular-resources) article to find out how to block remote access software, anonymizers, torrents, and other popular resources.</p>

The status of the module can be viewed by clicking on the checkmark icon at the top of the screen next to **Application Control:  
[![1. App Control.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/TKqGUvM6ruJw7M7M-1-app-control.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/TKqGUvM6ruJw7M7M-1-app-control.png)**

How the rule set works:

SafeUTM analyzes traffic and looks for a rule that matches this traffic from the list and applies it. If there are several rules in the list with the same conditions ("Applies to" and "Protocols" columns) but different actions (Action column), then the one with the higher priority will be applied.

---

#### Creating Rules  


Rules are configured in **Traffic Rules -&gt; Application Control**.

To create a new rule, follow these steps:

1\. Click **Add** in the left upper corner of the screen.  
[![2. App Control.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/WPDSnumBH3q0kajC-2-app-control.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/WPDSnumBH3q0kajC-2-app-control.png)

2\. Specify the following parameters:

- **Title** – type in the rule name for the convenience of administration. Maximum 42 characters.
- **Applies to** – you can select objects of the following types: user, user group, IP address, IP address range, subnet, list of IP addresses, or a special object **Quota Exceeded** (users who exceed traffic quota fall in this object).
- **Protocols** – select (app) layer-7 protocol(s) from the list.
- **Action** – allow or deny the selected protocol.

3\. Click **Save**.

# Content Filter



# Content Filter

Setting up content filtering and troubleshooting.

---

Content filtering on the SafeUTM server is implemented based on web traffic data received from the web traffic proxying module. Thus, the content filter allows you to efficiently block access to various internet resources.

The mechanism of content filtering consists in checking the affiliation of the address requested by a website or website page user and its presence in prohibited resource lists. The lists in their turn are divided into categories for easier administration.

<p class="callout warning">The content filtering module only works with an active subscription to updates in the Enterprise edition.</p>

<p class="callout info">HTTPS sites without traffic decryption are filtered by domain only (not by full URL), **Files** category rules cannot be applied to them either. Create rules for decrypting HTTPS traffic of necessary categories in order to fully filter HTTPS.</p>

---

#### Content filter settings and categories

<details id="bkmrk-content-filtering-se"><summary>Content Filtering Setup</summary>

Go to **Traffic Rules -&gt; Content Filter** and activate the extended content filter database by switching the slide to **Enabled** next to **Extended base of categories**.  
[![1. Content Filtering.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/TgEq6d7NkIPCBZ22-1-content-filtering.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/TgEq6d7NkIPCBZ22-1-content-filtering.png)

You can configure additional filtering options in the **Settings** tab:

- **Block QUIC and HTTP/3 protocols.** An experimental protocol used by Chrome browser for access to some resources (e.g. YouTube). It is recommended to be blocked as filtering of resources working under this protocol will not be possible otherwise.
- **Safe search.** Forcibly enables safe search in search engines (Google, Yandex, YouTube, Yahoo, Bing). **In order for this function to work, you need to enable HTTPS filtering by certificate substitution for these resources**. [![2. Content Filtering.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/Fz7O1hGFcDxkdnpM-2-content-filtering.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/Fz7O1hGFcDxkdnpM-2-content-filtering.png)

</details><details id="bkmrk-content-filtering-ca"><summary>Content Filtering Categories</summary>

- **Extended base of categories**. Over 140 categories including millions of URLs automatically updated by the server. The status of updates and database usage can be viewed in the **Settings** tab in the Content Filtering section. These categories only work with an active subscription to updates in commercial editions.
- **Custom categories**. You can create your own rules in the tab with the same name. [![3. Content Filtering.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/KfvTOa42nSOkbpJi-3-content-filtering.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/KfvTOa42nSOkbpJi-3-content-filtering.png)
- **Special**. Includes four categories – all queries, all categorized queries, all non-categorized queries, and queries with direct access by IP addresses.
- **Files**. Eight defined categories of files blocked by extension and MIME type. Preset file groups (Executable Files, Archives, Video Files, Audio Files, Flash video, Active-X, Torrent files, and Documents) cannot be edited. Filtering HTTPS traffic for these types of categories is only possible when it is decrypted.

</details>
---

#### Applying Filtering

<details id="bkmrk-applying-filtering-r-0"><summary>Applying Filtering Rules to Users</summary>

The rules are applied from top to bottom according to the order in the table until the first match. Thus, if the higher-level rule allows a certain resource for a specified user group, the lower-level rules will not be applied to it. This way more flexible filtering settings can be created, excluding desired users by higher-level rules from blocking rules. HTTPS decryption rules apply in a similar way.

Rules can be enabled, disabled, changed in priority, edited, and deleted in the **Operations** column. Content filtering rules are applied immediately after they are created and enabled.  
[![4. Content Filtering.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/orCpLaqWJ9o5GnPj-4-content-filtering.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/orCpLaqWJ9o5GnPj-4-content-filtering.png)

To create a new rule, click on **Add** in the left corner above the table.  
[![5. Content Filtering.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/CUcWJXfnx56AF1Gt-5-content-filtering.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/CUcWJXfnx56AF1Gt-5-content-filtering.png)

Fill in the following fields:

- **Title** – the rule name in the list. Maximum 42 characters.
- **Applies to** – you can select objects of the following types: user, user group, IP address, IP address range, subnet, list of IP addresses, or a special object **Quota Exceeded** (users who exceed traffic quota fall in this object).
- **Sites Categories** – user, special, and advanced web-resource categories.
- **Action** – the action of this rule towards web requests. You can prohibit, allow or decrypt HTTPS traffic. [![6. Content Filtering.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/zj7daPJI4zIkp3OI-6-content-filtering.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/zj7daPJI4zIkp3OI-6-content-filtering.png)

</details><details id="bkmrk-diagnostics-if-conte"><summary>Diagnostics</summary>

If content filtering rules are not working, check the following parameters in the settings:

1. The IP address of the user’s computer must correspond to their address in authorization (section **Monitoring** – **Authorized users**), and the user must be in the group to which the rule applies.
2. The IP address of the user and the resource to which they access must not be included in the proxy server exceptions.
3. Check if the resource to which you are accessing is categorized correctly in the field **URL for** **Categorization** in the **Rules** tab. [![7. Content Filtering.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/Ngh2lQIijNIOwOxo-7-content-filtering.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/Ngh2lQIijNIOwOxo-7-content-filtering.png)  
    If the site is incorrectly categorized, please use the [**SafeDNS feedback form**](https://www.safedns.com/resource/support-ticket).
4. VPN functions or plug-ins are not used in the user’s browser or computer; third-party proxy servers are not set.

</details>

# Description of Content Filter Categories

The article describes in detail the categories of queries to web resources.

---

#### Special categories

- **All queries** - all queries to web resources fall under this category.
- **All categorized queries** - all queries to web resources categorized by built-in or custom categories fall under this category.
- **All non-categorized queries** - all queries to web resources that have not been categorized by built-in or custom categories fall under this category.
- **Direct access by IP** - queries to web resources by IP address (http://84.201.128.105 /).

---

#### Extended categories

<table border="1" id="bkmrk-category-description" style="border-collapse: collapse; width: 100%; height: 6577.19px;"><tbody><tr style="height: 29.7969px;"><td class="align-center" style="width: 4.94438%; height: 29.7969px;">  
</td><td class="align-center" style="width: 20.7671%; height: 29.7969px;">**Category**</td><td class="align-center" style="width: 74.2885%; height: 29.7969px;">**Description**</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":1}" style="width: 4.94438%; height: 29.7969px;">1</td><td data-sheets-value="{"1":2,"2":"Abortion"}" style="width: 20.7671%; height: 29.7969px;">Abortion</td><td data-sheets-value="{"1":2,"2":"Web pages, which discuss abortions from medical, legal, historical and other points of view"}" style="width: 74.2885%; height: 29.7969px;">Websites, that discuss abortions from medical, legal, historical, and other points of view</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":2}" style="width: 4.94438%; height: 29.7969px;">2</td><td data-sheets-value="{"1":2,"2":"Abortion - Pro Choice"}" style="width: 20.7671%; height: 29.7969px;">Abortion - Pro-Choice</td><td data-sheets-value="{"1":2,"2":"Websites advocating the legal right to choose whether or not to have an abortion"}" style="width: 74.2885%; height: 29.7969px;">Websites advocating the legal right to choose whether or not to have an abortion</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":3}" style="width: 4.94438%; height: 29.7969px;">3</td><td data-sheets-value="{"1":2,"2":"Abortion - Pro Life"}" style="width: 20.7671%; height: 29.7969px;">Abortion - Pro Life</td><td data-sheets-value="{"1":2,"2":"Websites condemning the use of abortion"}" style="width: 74.2885%; height: 29.7969px;">Websites condemning the use of abortion</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":4}" style="width: 4.94438%; height: 46.5938px;">4</td><td data-sheets-value="{"1":2,"2":"Advocacy Groups & Trade Associations"}" style="width: 20.7671%; height: 46.5938px;">Advocacy Groups &amp; Trade Associations</td><td data-sheets-value="{"1":2,"2":"Websites dedicated to industrial shopping groups, lobbyists, unions, professional organizations and other associations, including communities of like-minded people"}" style="width: 74.2885%; height: 46.5938px;"><div><div>Websites about industrial shopping groups, lobbyists, unions, professional organizations, and other associations, including communities of like-minded people</div></div></td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":5}" style="width: 4.94438%; height: 46.5938px;">5</td><td data-sheets-value="{"1":2,"2":"Agriculture"}" style="width: 20.7671%; height: 46.5938px;">Agriculture</td><td data-sheets-value="{"1":2,"2":"Websites devoted to science, art and business related to agriculture (production of grain crops, lifting livestock, products, services, etc.)."}" style="width: 74.2885%; height: 46.5938px;">Websites about science, art, and business related to agriculture (production of grain crops, lifting livestock, products, services, etc.).</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":6}" style="width: 4.94438%; height: 46.5938px;">6</td><td data-sheets-value="{"1":2,"2":"Alcohol"}" style="width: 20.7671%; height: 46.5938px;">Alcohol</td><td data-sheets-value="{"1":2,"2":"Websites calling for alcohol consumption (or justifying its use), as well as sites that sell alcoholic beverages, including beer, wine, etc."}" style="width: 74.2885%; height: 46.5938px;">Websites calling for alcohol consumption (or justifying its use), as well as sites that sell alcoholic beverages, including beer, wine, etc.</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":7}" style="width: 4.94438%; height: 46.5938px;">7</td><td data-sheets-value="{"1":2,"2":"Anonymizer"}" style="width: 20.7671%; height: 46.5938px;">Anonymizer</td><td data-sheets-value="{"1":2,"2":"Websites designed to bypass network filters. Such resources can be used by company employees to visit prohibited websites"}" style="width: 74.2885%; height: 46.5938px;">Websites designed to bypass network filters. Such resources can be used by company employees to visit prohibited websites</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":8}" style="width: 4.94438%; height: 46.5938px;">8</td><td data-sheets-value="{"1":2,"2":"Architecture & Construction"}" style="width: 20.7671%; height: 46.5938px;">Architecture &amp; Construction</td><td data-sheets-value="{"1":2,"2":"Websites devoted to the construction, design of buildings and structures, architecture, as well as organizations or services related to design, construction and construction design"}" style="width: 74.2885%; height: 46.5938px;"><div><div>Websites about the construction, design of buildings and structures, architecture, as well as organizations or services related to design, construction, and construction design</div></div></td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":9}" style="width: 4.94438%; height: 29.7969px;">9</td><td data-sheets-value="{"1":2,"2":"Art"}" style="width: 20.7671%; height: 29.7969px;">Art</td><td data-sheets-value="{"1":2,"2":"Websites dedicated to fine art"}" style="width: 74.2885%; height: 29.7969px;">Websites about fine art</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":10}" style="width: 4.94438%; height: 29.7969px;">10</td><td data-sheets-value="{"1":2,"2":"Arts"}" style="width: 20.7671%; height: 29.7969px;">Arts</td><td data-sheets-value="{"1":2,"2":"Websites devoted to art in a general sense"}" style="width: 74.2885%; height: 29.7969px;">Websites about art in general</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":11}" style="width: 4.94438%; height: 46.5938px;">11</td><td data-sheets-value="{"1":2,"2":"Astrology & Horoscopes"}" style="width: 20.7671%; height: 46.5938px;">Astrology &amp; Horoscopes</td><td data-sheets-value="{"1":2,"2":"Websites about astrology, horoscopes, as well as predictions on stars or zodiac sign"}" style="width: 74.2885%; height: 46.5938px;">Websites about astrology, horoscopes, as well as predictions on stars or zodiac signs</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":12}" style="width: 4.94438%; height: 46.5938px;">12</td><td data-sheets-value="{"1":2,"2":"Atheism & Agnosticism"}" style="width: 20.7671%; height: 46.5938px;">Atheism &amp; Agnosticism</td><td data-sheets-value="{"1":2,"2":"Websites leading anti-religious propaganda or questioning religious, spiritual, metaphysical, or supernatural views"}" style="width: 74.2885%; height: 46.5938px;">Websites leading anti-religious propaganda or questioning religious, spiritual, metaphysical, or supernatural views</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":13}" style="width: 4.94438%; height: 46.5938px;">13</td><td data-sheets-value="{"1":2,"2":"Auctions & Marketplaces"}" style="width: 20.7671%; height: 46.5938px;">Auctions &amp; Marketplaces</td><td data-sheets-value="{"1":2,"2":"Websites devoted to sales of goods and services through ads, online auctions or through other non-traditional channels"}" style="width: 74.2885%; height: 46.5938px;">Websites about sales of goods and services through ads, online auctions, or other non-traditional channels</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":14}" style="width: 4.94438%; height: 46.5938px;">14</td><td data-sheets-value="{"1":2,"2":"Banking"}" style="width: 20.7671%; height: 46.5938px;">Banking</td><td data-sheets-value="{"1":2,"2":"Websites of banks and other credit institutions, including websites of Internet banks. This category does not include sites of organizations offering brokerage services"}" style="width: 74.2885%; height: 46.5938px;"><div><div>Websites of banks and other credit institutions, including websites of Internet banks. This category does not include sites of organizations offering brokerage services</div></div></td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":15}" style="width: 4.94438%; height: 46.5938px;">15</td><td data-sheets-value="{"1":2,"2":"Biotechnology"}" style="width: 20.7671%; height: 46.5938px;">Biotechnology</td><td data-sheets-value="{"1":2,"2":"Websites devoted to studies in the field of genetics, as well as sites of research institutes and organizations working in the field of biotechnology"}" style="width: 74.2885%; height: 46.5938px;">Websites about studies in the field of genetics, as well as sites of research institutes and organizations working in the field of biotechnology</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":16}" style="width: 4.94438%; height: 46.5938px;">16</td><td data-sheets-value="{"1":2,"2":"Botnet"}" style="width: 20.7671%; height: 46.5938px;">Botnet</td><td data-sheets-value="{"1":2,"2":"Websites or compromised Web resources on which the software used by hackers for spam mailings and the implementation of various Internet attacks is launched"}" style="width: 74.2885%; height: 46.5938px;"><div><div>Websites or compromised web resources on which the software used by hackers for spam mailings and the implementation of various Internet attacks is launched</div></div></td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":17}" style="width: 4.94438%; height: 29.7969px;">17</td><td data-sheets-value="{"1":2,"2":"Business/Services"}" style="width: 20.7671%; height: 29.7969px;">Business/Services</td><td data-sheets-value="{"1":2,"2":"Websites about business and services."}" style="width: 74.2885%; height: 29.7969px;">Websites about business and services.</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":18}" style="width: 4.94438%; height: 46.5938px;">18</td><td data-sheets-value="{"1":2,"2":"Businesses & Services (General)"}" style="width: 20.7671%; height: 46.5938px;">Businesses &amp; Services (General)</td><td data-sheets-value="{"1":2,"2":"Websites about business and services. This category includes resources that are not subject to more accurate categorization than business and services"}" style="width: 74.2885%; height: 46.5938px;">Websites about business and services. This category includes resources that are not subject to more accurate categorization than business and services</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":19}" style="width: 4.94438%; height: 46.5938px;">19</td><td data-sheets-value="{"1":2,"2":"Cars/Transportation"}" style="width: 20.7671%; height: 46.5938px;">Cars/Transportation</td><td data-sheets-value="{"1":2,"2":"Websites about vehicles, including sale, promotion, discussion, manufacturers and online stores"}" style="width: 74.2885%; height: 46.5938px;">Websites about vehicles, including sales, promotion, discussion, manufacturers, and online stores</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":20}" style="width: 4.94438%; height: 46.5938px;">20</td><td data-sheets-value="{"1":2,"2":"Cartoons, Anime & Comic Books"}" style="width: 20.7671%; height: 46.5938px;">Cartoons, Anime &amp; Comic Books</td><td data-sheets-value="{"1":2,"2":"Websites on which multiplier TV shows are placed, films, comics"}" style="width: 74.2885%; height: 46.5938px;">Websites with animation, cartoon TV shows, and comics</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":21}" style="width: 4.94438%; height: 29.7969px;">21</td><td data-sheets-value="{"1":2,"2":"Catalogs"}" style="width: 20.7671%; height: 29.7969px;">Catalogs</td><td data-sheets-value="{"1":2,"2":"Websites with grocery lists and catalogs without the ability to make an online purchase"}" style="width: 74.2885%; height: 29.7969px;">Websites with grocery lists and catalogs without the ability to make an online purchase</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":22}" style="width: 4.94438%; height: 29.7969px;">22</td><td data-sheets-value="{"1":2,"2":"Chat"}" style="width: 20.7671%; height: 29.7969px;">Chat</td><td data-sheets-value="{"1":2,"2":"Online chat"}" style="width: 74.2885%; height: 29.7969px;">Online chats</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":23}" style="width: 4.94438%; height: 29.7969px;">23</td><td data-sheets-value="{"1":2,"2":"Chat/IM"}" style="width: 20.7671%; height: 29.7969px;">Chat/IM</td><td data-sheets-value="{"1":2,"2":"Online chat and messengers"}" style="width: 74.2885%; height: 29.7969px;">Online chats and messengers</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":24}" style="width: 4.94438%; height: 29.7969px;">24</td><td data-sheets-value="{"1":2,"2":"Child Abuse Images"}" style="width: 20.7671%; height: 29.7969px;">Child Abuse Images</td><td data-sheets-value="{"1":2,"2":"Websites with images of physical or sexual violence over children"}" style="width: 74.2885%; height: 29.7969px;">Websites with images of physical or sexual violence against children</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":25}" style="width: 4.94438%; height: 46.5938px;">25</td><td data-sheets-value="{"1":2,"2":"Child Inappropriate"}" style="width: 20.7671%; height: 46.5938px;">Child Inappropriate</td><td data-sheets-value="{"1":2,"2":"Materials inappropriate for children: tasteless, cruel (including, in relation to animals), toilet humor, etc."}" style="width: 74.2885%; height: 46.5938px;">Materials inappropriate for children: tasteless, cruel (including, in relation to animals), toilet humor, etc.</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":26}" style="width: 4.94438%; height: 46.5938px;">26</td><td data-sheets-value="{"1":2,"2":"Command and Control Centers"}" style="width: 20.7671%; height: 46.5938px;">Command and Control Centers</td><td data-sheets-value="{"1":2,"2":"Internet servers used to manage botnets"}" style="width: 74.2885%; height: 46.5938px;">Internet servers used to manage botnets</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":27}" style="width: 4.94438%; height: 46.5938px;">27</td><td data-sheets-value="{"1":2,"2":"Community Forums"}" style="width: 20.7671%; height: 46.5938px;">Community Forums</td><td data-sheets-value="{"1":2,"2":"Websites of forums, news groups, archives of mailing lists, announcement boards and similar community resources"}" style="width: 74.2885%; height: 46.5938px;">Websites of forums, news groups, archives of mailing lists, announcement boards, and similar community resources</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":28}" style="width: 4.94438%; height: 29.7969px;">28</td><td data-sheets-value="{"1":2,"2":"Community Sites"}" style="width: 20.7671%; height: 29.7969px;">Community Sites</td><td data-sheets-value="{"1":2,"2":"Social networks, as well as Websites of various online communities"}" style="width: 74.2885%; height: 29.7969px;">Social networks, as well as websites of various online communities</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":29}" style="width: 4.94438%; height: 46.5938px;">29</td><td data-sheets-value="{"1":2,"2":"Compromised"}" style="width: 20.7671%; height: 46.5938px;">Compromised</td><td data-sheets-value="{"1":2,"2":"Websites that were compromised by attackers and look like official websites, but actually contain malicious code"}" style="width: 74.2885%; height: 46.5938px;">Websites that were compromised by attackers and look like official websites, but actually contain malicious code</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":30}" style="width: 4.94438%; height: 46.5938px;">30</td><td data-sheets-value="{"1":2,"2":"Computers & Technology"}" style="width: 20.7671%; height: 46.5938px;">Computers &amp; Technology</td><td data-sheets-value="{"1":2,"2":"Websites about it, software, Internet and computers"}" style="width: 74.2885%; height: 46.5938px;">Websites about it, software, Internet, and computers</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":31}" style="width: 4.94438%; height: 46.5938px;">31</td><td data-sheets-value="{"1":2,"2":"Content Servers"}" style="width: 20.7671%; height: 46.5938px;">Content Servers</td><td data-sheets-value="{"1":2,"2":"Websites that do not contain navigation elements that are usually used to place images or other media content in order to increase productivity and scalability"}" style="width: 74.2885%; height: 46.5938px;">Websites that do not contain navigation elements and are usually used to place images or other media content in order to increase productivity and scalability</td></tr><tr style="height: 46.5938px;"><td class="align-center" style="width: 4.94438%; height: 46.5938px;">32</td><td style="width: 20.7671%; height: 46.5938px;">Contests &amp; Surveys</td><td style="width: 74.2885%; height: 46.5938px;">Websites about online competitions, sales, and lotteries that are created to study consumer preferences, and can also be used as an element of various marketing activities</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":33}" style="width: 4.94438%; height: 29.7969px;">33</td><td data-sheets-value="{"1":2,"2":"Coupons"}" style="width: 20.7671%; height: 29.7969px;">Coupons</td><td data-sheets-value="{"1":2,"2":"Websites offering the acquisition of discount coupons (domoners)"}" style="width: 74.2885%; height: 29.7969px;">Websites offering the acquisition of discount coupons</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":34}" style="width: 4.94438%; height: 46.5938px;">34</td><td data-sheets-value="{"1":2,"2":"Criminal Skills"}" style="width: 20.7671%; height: 46.5938px;">Criminal Skills</td><td data-sheets-value="{"1":2,"2":"Websites providing information on how to commit illegal activity, such as theft, murder, creation of a bomb, opening the castle, etc."}" style="width: 74.2885%; height: 46.5938px;">Websites providing information on how to commit illegal activity, such as theft, murder, creation of a bomb, opening locks, etc.</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":35}" style="width: 4.94438%; height: 29.7969px;">35</td><td data-sheets-value="{"1":2,"2":"Criminal Skills/Hacking"}" style="width: 20.7671%; height: 29.7969px;">Criminal Skills/Hacking</td><td data-sheets-value="{"1":2,"2":"Websites providing information about computer hacks"}" style="width: 74.2885%; height: 29.7969px;">Websites providing information about computer hacks</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":36}" style="width: 4.94438%; height: 29.7969px;">36</td><td data-sheets-value="{"1":2,"2":"Dating & Relationships"}" style="width: 20.7671%; height: 29.7969px;">Dating &amp; Relationships</td><td data-sheets-value="{"1":2,"2":"Websites dedicated to acquaintances, marriage, etc."}" style="width: 74.2885%; height: 29.7969px;">Websites about acquaintances, marriage, etc.</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":37}" style="width: 4.94438%; height: 29.7969px;">37</td><td data-sheets-value="{"1":2,"2":"Download Sites"}" style="width: 20.7671%; height: 29.7969px;">Download Sites</td><td data-sheets-value="{"1":2,"2":"Websites with software catalogs, including conditionally paid, free and free-free software"}" style="width: 74.2885%; height: 29.7969px;">Websites with software catalogs, including shareware, paid, free, and open-source software</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":38}" style="width: 4.94438%; height: 29.7969px;">38</td><td data-sheets-value="{"1":2,"2":"Education"}" style="width: 20.7671%; height: 29.7969px;">Education</td><td data-sheets-value="{"1":2,"2":"Websites related to learning"}" style="width: 74.2885%; height: 29.7969px;">Websites related to learning</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":39}" style="width: 4.94438%; height: 29.7969px;">39</td><td data-sheets-value="{"1":2,"2":"Educational Institutions"}" style="width: 20.7671%; height: 29.7969px;">Educational Institutions</td><td data-sheets-value="{"1":2,"2":"Websites of schools, universities and other educational institutions"}" style="width: 74.2885%; height: 29.7969px;">Websites of schools, universities, and other educational institutions</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":40}" style="width: 4.94438%; height: 46.5938px;">40</td><td data-sheets-value="{"1":2,"2":"Educational Materials & Studies"}" style="width: 20.7671%; height: 46.5938px;">Educational Materials &amp; Studies</td><td data-sheets-value="{"1":2,"2":"Websites on which academic publications, magazines, research results, curricula, as well as online courses, textbooks, etc. are posted."}" style="width: 74.2885%; height: 46.5938px;">Websites on which academic publications, magazines, research results, curricula, as well as online courses, textbooks, etc. are posted.</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":41}" style="width: 4.94438%; height: 46.5938px;">41</td><td data-sheets-value="{"1":2,"2":"Entertainment and Videos"}" style="width: 20.7671%; height: 46.5938px;">Entertainment and Videos</td><td data-sheets-value="{"1":2,"2":"Websites with video and entertainment"}" style="width: 74.2885%; height: 46.5938px;">Websites with video and entertainment</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":42}" style="width: 4.94438%; height: 46.5938px;">42</td><td data-sheets-value="{"1":2,"2":"Entertainment News & Celebrity Sites"}" style="width: 20.7671%; height: 46.5938px;">Entertainment News &amp; Celebrity Sites</td><td data-sheets-value="{"1":2,"2":"Websites dedicated to news and gossip about celebrities, television shows, films and show business in general"}" style="width: 74.2885%; height: 46.5938px;">Websites about news and gossip about celebrities, television shows, films, and show business in general</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":43}" style="width: 4.94438%; height: 46.5938px;">43</td><td data-sheets-value="{"1":2,"2":"Entertainment Venues & Events"}" style="width: 20.7671%; height: 46.5938px;">Entertainment Venues &amp; Events</td><td data-sheets-value="{"1":2,"2":"Websites dedicated to cultural institutions such as theaters, cinemas, night clubs, festivals, etc."}" style="width: 74.2885%; height: 46.5938px;">Websites about cultural institutions such as theaters, cinemas, nightclubs, festivals, etc.</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":44}" style="width: 4.94438%; height: 46.5938px;">44</td><td data-sheets-value="{"1":2,"2":"Fashion & Beauty"}" style="width: 20.7671%; height: 46.5938px;">Fashion &amp; Beauty</td><td data-sheets-value="{"1":2,"2":"Websites devoted to fashion and beauty, including sites related to fashion and containing information about clothes, jewelry, cosmetics and perfume"}" style="width: 74.2885%; height: 46.5938px;">Websites about fashion and beauty, including sites related to fashion and containing information about clothes, jewelry, cosmetics, and perfume</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":45}" style="width: 4.94438%; height: 29.7969px;">45</td><td data-sheets-value="{"1":2,"2":"File Repositories"}" style="width: 20.7671%; height: 29.7969px;">File Repositories</td><td data-sheets-value="{"1":2,"2":"File organizers sites"}" style="width: 74.2885%; height: 29.7969px;">File sharing sites</td></tr><tr style="height: 29.7969px;"><td class="align-center" style="width: 4.94438%; height: 29.7969px;">46</td><td style="width: 20.7671%; height: 29.7969px;">Finance</td><td style="width: 74.2885%; height: 29.7969px;">Websites, that discuss economic issues, investment strategies, pension, and tax planning</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":47}" style="width: 4.94438%; height: 46.5938px;">47</td><td data-sheets-value="{"1":2,"2":"Finance (General)"}" style="width: 20.7671%; height: 46.5938px;">Finance (General)</td><td data-sheets-value="{"1":2,"2":"Websites, on the pages of which economic issues are discussed. This category includes resources that are not subject to more accurate categorization than finances."}" style="width: 74.2885%; height: 46.5938px;"><div><div>Websites, that discuss economic issues. This category includes resources that are not subject to more accurate categorization than finances.</div></div></td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":48}" style="width: 4.94438%; height: 29.7969px;">48</td><td data-sheets-value="{"1":2,"2":"Fitness & Recreation"}" style="width: 20.7671%; height: 29.7969px;">Fitness &amp; Recreation</td><td data-sheets-value="{"1":2,"2":"Websites dedicated to fitness and other recreational activities"}" style="width: 74.2885%; height: 29.7969px;">Websites about fitness and other recreational activities</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":49}" style="width: 4.94438%; height: 29.7969px;">49</td><td data-sheets-value="{"1":2,"2":"Food & Restaurants"}" style="width: 20.7671%; height: 29.7969px;">Food &amp; Restaurants</td><td data-sheets-value="{"1":2,"2":"Food sites: from restaurants and cafes to recipes and cooking tips"}" style="width: 74.2885%; height: 29.7969px;">Food sites: from restaurants and cafes to recipes and cooking tips</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":50}" style="width: 4.94438%; height: 29.7969px;">50</td><td data-sheets-value="{"1":2,"2":"Gambling"}" style="width: 20.7671%; height: 29.7969px;">Gambling</td><td data-sheets-value="{"1":2,"2":"Websites calling for participation in gambling (lotteries, casinos, totalizers, etc.)"}" style="width: 74.2885%; height: 29.7969px;">Websites calling for participation in gambling (lotteries, casinos, etc.)</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":51}" style="width: 4.94438%; height: 29.7969px;">51</td><td data-sheets-value="{"1":2,"2":"Games"}" style="width: 20.7671%; height: 29.7969px;">Games</td><td data-sheets-value="{"1":2,"2":"Websites dedicated to computer games, as well as sites with online games"}" style="width: 74.2885%; height: 29.7969px;">Websites about computer games, as well as sites with online games</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":52}" style="width: 4.94438%; height: 29.7969px;">52</td><td data-sheets-value="{"1":2,"2":"Gay, Lesbian or Bisexual"}" style="width: 20.7671%; height: 29.7969px;">Gay, Lesbian, or Bisexual</td><td data-sheets-value="{"1":2,"2":"Websites that discuss issues related to non-traditional sexual orientation"}" style="width: 74.2885%; height: 29.7969px;">Websites that discuss non-traditional sexual orientation</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":53}" style="width: 4.94438%; height: 29.7969px;">53</td><td data-sheets-value="{"1":2,"2":"Government"}" style="width: 20.7671%; height: 29.7969px;">Government</td><td data-sheets-value="{"1":2,"2":"Websites dedicated to state organizations."}" style="width: 74.2885%; height: 29.7969px;">Websites of state organizations</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":54}" style="width: 4.94438%; height: 46.5938px;">54</td><td data-sheets-value="{"1":2,"2":"Government Sponsored"}" style="width: 20.7671%; height: 46.5938px;">Government Sponsored</td><td data-sheets-value="{"1":2,"2":"Websites devoted to state organizations, including police, fire services, election commissions, research and programs sponsored by the state"}" style="width: 74.2885%; height: 46.5938px;">Websites of state organizations, including police, fire services, election commissions, research, and programs sponsored by the state</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":55}" style="width: 4.94438%; height: 29.7969px;">55</td><td data-sheets-value="{"1":2,"2":"Hacking"}" style="width: 20.7671%; height: 29.7969px;">Hacking</td><td data-sheets-value="{"1":2,"2":"Websites containing information or utilities that can be used to make online exceptions"}" style="width: 74.2885%; height: 29.7969px;">Websites containing information or utilities that can be used to make online hacks</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":56}" style="width: 4.94438%; height: 29.7969px;">56</td><td data-sheets-value="{"1":2,"2":"Hate Speech"}" style="width: 20.7671%; height: 29.7969px;">Hate Speech</td><td data-sheets-value="{"1":2,"2":"Websites calling for extremism, discrimination on sexual, racial, religious and other signs"}" style="width: 74.2885%; height: 29.7969px;">Websites calling for extremism, discrimination on sexual, racial, religious, and other signs</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":57}" style="width: 4.94438%; height: 29.7969px;">57</td><td data-sheets-value="{"1":2,"2":"Health"}" style="width: 20.7671%; height: 29.7969px;">Health</td><td data-sheets-value="{"1":2,"2":"Websites devoted to personal health"}" style="width: 74.2885%; height: 29.7969px;">Websites about personal health</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":58}" style="width: 4.94438%; height: 46.5938px;">58</td><td data-sheets-value="{"1":2,"2":"Health & Medical"}" style="width: 20.7671%; height: 46.5938px;">Health &amp; Medical</td><td data-sheets-value="{"1":2,"2":"Websites devoted to personal health, medical services, medical equipment, procedures, mental health, hospitals and clinics"}" style="width: 74.2885%; height: 46.5938px;">Websites about personal health, medical services, medical equipment, procedures, mental health, hospitals, and clinics</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":59}" style="width: 4.94438%; height: 29.7969px;">59</td><td data-sheets-value="{"1":2,"2":"High Risk"}" style="width: 20.7671%; height: 29.7969px;">High Risk</td><td data-sheets-value="{"1":2,"2":"High threat sites"}" style="width: 74.2885%; height: 29.7969px;">High threat sites</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":60}" style="width: 4.94438%; height: 46.5938px;">60</td><td data-sheets-value="{"1":2,"2":"Hobbies & Leisure"}" style="width: 20.7671%; height: 46.5938px;">Hobbies &amp; Leisure</td><td data-sheets-value="{"1":2,"2":"Websites containing information about various crafts and hobbies, such as embroidery, collecting, aircraft modeling, etc."}" style="width: 74.2885%; height: 46.5938px;">Websites containing information about various crafts and hobbies, such as collecting, aircraft modeling, etc.</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":61}" style="width: 4.94438%; height: 46.5938px;">61</td><td data-sheets-value="{"1":2,"2":"Home & Office Furnishings"}" style="width: 20.7671%; height: 46.5938px;">Home &amp; Office Furnishings</td><td data-sheets-value="{"1":2,"2":"Websites that include information about furniture manufacturers, retail stores for the sale of furniture, tables, chairs, cabinets, etc."}" style="width: 74.2885%; height: 46.5938px;">Websites that include information about furniture manufacturers, and retail stores for the sale of furniture, tables, chairs, cabinets, etc.</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":62}" style="width: 4.94438%; height: 46.5938px;">62</td><td data-sheets-value="{"1":2,"2":"Home, Garden & Family"}" style="width: 20.7671%; height: 46.5938px;">Home, Garden &amp; Family</td><td data-sheets-value="{"1":2,"2":"Websites that disclose questions about family relationships and the arrangement of the house, including information about education, internal decoration, landscaping, cleaning, family, etc."}" style="width: 74.2885%; height: 46.5938px;"><div><div>Websites about family relationships and the house, including information about education, internal decoration, landscaping, cleaning, family, etc.</div></div></td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":63}" style="width: 4.94438%; height: 29.7969px;">63</td><td data-sheets-value="{"1":2,"2":"Home/Leisure"}" style="width: 20.7671%; height: 29.7969px;">Home/Leisure</td><td data-sheets-value="{"1":2,"2":"Websites, about the house and rest"}" style="width: 74.2885%; height: 29.7969px;">Websites about house and leisure</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":64}" style="width: 4.94438%; height: 29.7969px;">64</td><td data-sheets-value="{"1":2,"2":"Humor"}" style="width: 20.7671%; height: 29.7969px;">Humor</td><td data-sheets-value="{"1":2,"2":"Websites containing humorous information, such as comics, jokes, funny pictures"}" style="width: 74.2885%; height: 29.7969px;">Websites containing humorous information, such as comics, jokes, funny pictures</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":65}" style="width: 4.94438%; height: 29.7969px;">65</td><td data-sheets-value="{"1":2,"2":"Illegal Drugs"}" style="width: 20.7671%; height: 29.7969px;">Illegal Drugs</td><td data-sheets-value="{"1":2,"2":"Websites calling for the use of narcotic substances, including improper use of drugs"}" style="width: 74.2885%; height: 29.7969px;">Websites about narcotic substances, including improper use of drugs</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":66}" style="width: 4.94438%; height: 46.5938px;">66</td><td data-sheets-value="{"1":2,"2":"Image Search"}" style="width: 20.7671%; height: 46.5938px;">Image Search</td><td data-sheets-value="{"1":2,"2":"Websites and search engines used to search for images and returning results containing miniatures of the latter"}" style="width: 74.2885%; height: 46.5938px;">Websites and search engines used to search for images and return results containing miniatures of the latter</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":67}" style="width: 4.94438%; height: 29.7969px;">67</td><td data-sheets-value="{"1":2,"2":"Information Security"}" style="width: 20.7671%; height: 29.7969px;">Information Security</td><td data-sheets-value="{"1":2,"2":"Websites of organizations providing information security services"}" style="width: 74.2885%; height: 29.7969px;">Websites of organizations providing information security services</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":68}" style="width: 4.94438%; height: 46.5938px;">68</td><td data-sheets-value="{"1":2,"2":"Instant Messenger"}" style="width: 20.7671%; height: 46.5938px;">Instant Messenger</td><td data-sheets-value="{"1":2,"2":"Websites of instant messages, as well as sites calling to maintain contacts with friends through messaging services"}" style="width: 74.2885%; height: 46.5938px;">Websites of instant messages, as well as websites used for advertising instant messengers on them</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":69}" style="width: 4.94438%; height: 29.7969px;">69</td><td data-sheets-value="{"1":2,"2":"Insurance"}" style="width: 20.7671%; height: 29.7969px;">Insurance</td><td data-sheets-value="{"1":2,"2":"Websites devoted to all types of insurance, including medical, state, property insurance, etc."}" style="width: 74.2885%; height: 29.7969px;">Websites about all types of insurance, including medical, state, property insurance, etc.</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":70}" style="width: 4.94438%; height: 46.5938px;">70</td><td data-sheets-value="{"1":2,"2":"Internet Phone & VoIP"}" style="width: 20.7671%; height: 46.5938px;">Internet Phone &amp; VoIP</td><td data-sheets-value="{"1":2,"2":"Websites allowing to make calls via Web or programs of software products that are designed to make calls via the Internet"}" style="width: 74.2885%; height: 46.5938px;">Websites allowing to make calls via the web or programs of software products that are designed to make calls via the Internet</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":71}" style="width: 4.94438%; height: 29.7969px;">71</td><td data-sheets-value="{"1":2,"2":"Job Search"}" style="width: 20.7671%; height: 29.7969px;">Job Search</td><td data-sheets-value="{"1":2,"2":"Websites devoted to the search for work, including recruiting agencies"}" style="width: 74.2885%; height: 29.7969px;">Websites about the search for work, including recruiting agencies</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":72}" style="width: 4.94438%; height: 46.5938px;">72</td><td data-sheets-value="{"1":2,"2":"Kid's Pages"}" style="width: 20.7671%; height: 46.5938px;">Kid's Pages</td><td data-sheets-value="{"1":2,"2":"Websites designed for young children (up to 10 years old), including games and entertainment pages"}" style="width: 74.2885%; height: 46.5938px;">Websites designed for young children (up to 10 years old), including games and entertainment pages</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":73}" style="width: 4.94438%; height: 46.5938px;">73</td><td data-sheets-value="{"1":2,"2":"Legislation, Politics & Law"}" style="width: 20.7671%; height: 46.5938px;">Legislation, Politics &amp; Law</td><td data-sheets-value="{"1":2,"2":"Websites on legislation, politics, parties, elections, their results and opinions"}" style="width: 74.2885%; height: 46.5938px;">Websites on legislation, politics, parties, elections, their results, and opinions</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":74}" style="width: 4.94438%; height: 46.5938px;">74</td><td data-sheets-value="{"1":2,"2":"Lingerie, Suggestive & Pinup"}" style="width: 20.7671%; height: 46.5938px;">Lingerie, Suggestive &amp; Pinup</td><td data-sheets-value="{"1":2,"2":"Websites with photos and videos that depict girls in sexy provocative clothes, for example, in lady's lingerie"}" style="width: 74.2885%; height: 46.5938px;">Websites with photos and videos that depict women in sexy provocative clothes, for example, in lingerie</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":75}" style="width: 4.94438%; height: 46.5938px;">75</td><td data-sheets-value="{"1":2,"2":"Literature & Books"}" style="width: 20.7671%; height: 46.5938px;">Literature &amp; Books</td><td data-sheets-value="{"1":2,"2":"Websites on which literature is presented, including fiction and documentary novels, poems and biographies"}" style="width: 74.2885%; height: 46.5938px;">Websites on which literature is presented, including fiction and documentary novels, poems, and biographies</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":76}" style="width: 4.94438%; height: 46.5938px;">76</td><td data-sheets-value="{"1":2,"2":"Login Screens"}" style="width: 20.7671%; height: 46.5938px;">Login Screens</td><td data-sheets-value="{"1":2,"2":"Websites that are used for a single authentication and access to a wide variety of services. For example, systems such as Yahoo or Google"}" style="width: 74.2885%; height: 46.5938px;">Websites that are used for a single authentication and access to a wide variety of services. For example, systems such as Yahoo or Google</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":77}" style="width: 4.94438%; height: 46.5938px;">77</td><td data-sheets-value="{"1":2,"2":"Malware Call-Home"}" style="width: 20.7671%; height: 46.5938px;">Malware Call-Home</td><td data-sheets-value="{"1":2,"2":"Malicious event when active malware on a computer attempts to contact a remote “home” server"}" style="width: 74.2885%; height: 46.5938px;">Malicious event when active malware on a computer attempts to contact a remote “home” server</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":78}" style="width: 4.94438%; height: 46.5938px;">78</td><td data-sheets-value="{"1":2,"2":"Malware Distribution Point"}" style="width: 20.7671%; height: 46.5938px;">Malware Distribution Point</td><td data-sheets-value="{"1":2,"2":"Websites on which viruses, exploites and other malicious in"}" style="width: 74.2885%; height: 46.5938px;">Websites with viruses, exploits, and other malicious programs</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":79}" style="width: 4.94438%; height: 29.7969px;">79</td><td data-sheets-value="{"1":2,"2":"Manufacturing"}" style="width: 20.7671%; height: 29.7969px;">Manufacturing</td><td data-sheets-value="{"1":2,"2":"Websites devoted to business related to industrial production"}" style="width: 74.2885%; height: 29.7969px;">Websites about business related to industrial production</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":80}" style="width: 4.94438%; height: 46.5938px;">80</td><td data-sheets-value="{"1":2,"2":"Marijuana"}" style="width: 20.7671%; height: 46.5938px;">Marijuana</td><td data-sheets-value="{"1":2,"2":"Websites on which information about marijuana, its cultivation or smoking is presented, including sites devoted to the legal use of marijuana, for example, in medicine"}" style="width: 74.2885%; height: 46.5938px;"><div><div>Websites on which information about marijuana, its cultivation, or smoking is presented, including sites about the legal use of marijuana, for example, in medicine</div></div></td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":81}" style="width: 4.94438%; height: 29.7969px;">81</td><td data-sheets-value="{"1":2,"2":"Marketing Services"}" style="width: 20.7671%; height: 29.7969px;">Marketing Services</td><td data-sheets-value="{"1":2,"2":"Websites of advertising and marketing agencies, except for banner networks"}" style="width: 74.2885%; height: 29.7969px;">Websites of advertising and marketing agencies</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":82}" style="width: 4.94438%; height: 29.7969px;">82</td><td data-sheets-value="{"1":2,"2":"Mature"}" style="width: 20.7671%; height: 29.7969px;">Mature</td><td data-sheets-value="{"1":2,"2":"Mature Content"}" style="width: 74.2885%; height: 29.7969px;">Mature content</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":83}" style="width: 4.94438%; height: 29.7969px;">83</td><td data-sheets-value="{"1":2,"2":"Medium Risk"}" style="width: 20.7671%; height: 29.7969px;">Medium Risk</td><td data-sheets-value="{"1":2,"2":"Websites posed by the average threat"}" style="width: 74.2885%; height: 29.7969px;">Websites that pose the average threat</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":84}" style="width: 4.94438%; height: 29.7969px;">84</td><td data-sheets-value="{"1":2,"2":"Military"}" style="width: 20.7671%; height: 29.7969px;">Military</td><td data-sheets-value="{"1":2,"2":"Websites sponsored by the armed forces and other state military institutions"}" style="width: 74.2885%; height: 29.7969px;">Websites sponsored by the armed forces and other state military institutions</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":85}" style="width: 4.94438%; height: 29.7969px;">85</td><td data-sheets-value="{"1":2,"2":"Miscellaneous"}" style="width: 20.7671%; height: 29.7969px;">Miscellaneous</td><td data-sheets-value="{"1":2,"2":"Websites that cannot be unambiguously attributed to any of the categories"}" style="width: 74.2885%; height: 29.7969px;">Websites that cannot be unambiguously attributed to any of the categories</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":86}" style="width: 4.94438%; height: 46.5938px;">86</td><td data-sheets-value="{"1":2,"2":"Mobile operators paid sites"}" style="width: 20.7671%; height: 46.5938px;">Mobile operators paid sites</td><td data-sheets-value="{"1":2,"2":"Paid websites of mobile operators"}" style="width: 74.2885%; height: 46.5938px;">Paid websites of mobile operators</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":87}" style="width: 4.94438%; height: 46.5938px;">87</td><td data-sheets-value="{"1":2,"2":"Mobile Phones"}" style="width: 20.7671%; height: 46.5938px;">Mobile Phones</td><td data-sheets-value="{"1":2,"2":"Websites of mobile phone manufacturers, including sites selling mobile phones and accessories for them"}" style="width: 74.2885%; height: 46.5938px;">Websites of mobile phone manufacturers, including sites selling mobile phones and accessories for them</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":88}" style="width: 4.94438%; height: 29.7969px;">88</td><td data-sheets-value="{"1":2,"2":"Motorized Vehicles"}" style="width: 20.7671%; height: 29.7969px;">Motorized Vehicles</td><td data-sheets-value="{"1":2,"2":"Websites about transport with engine"}" style="width: 74.2885%; height: 29.7969px;">Websites about transport with engine</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":89}" style="width: 4.94438%; height: 46.5938px;">89</td><td data-sheets-value="{"1":2,"2":"Music"}" style="width: 20.7671%; height: 46.5938px;">Music</td><td data-sheets-value="{"1":2,"2":"Websites dedicated to music. Internet radio, files in mp3 format, information about music groups, clips, etc."}" style="width: 74.2885%; height: 46.5938px;">Websites about music. Internet radio, files in mp3 format, information about music groups, clips, etc.</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":90}" style="width: 4.94438%; height: 29.7969px;">90</td><td data-sheets-value="{"1":2,"2":"Nature & Conservation"}" style="width: 20.7671%; height: 29.7969px;">Nature &amp; Conservation</td><td data-sheets-value="{"1":2,"2":"Websites with environmental information, ecology, etc."}" style="width: 74.2885%; height: 29.7969px;">Websites with environmental information, ecology, etc.</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":91}" style="width: 4.94438%; height: 29.7969px;">91</td><td data-sheets-value="{"1":2,"2":"News"}" style="width: 20.7671%; height: 29.7969px;">News</td><td data-sheets-value="{"1":2,"2":"News Web resources. Online publications of newspapers, magazines, news feeds"}" style="width: 74.2885%; height: 29.7969px;">News web resources. Online publications of newspapers, magazines, news feeds</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":92}" style="width: 4.94438%; height: 29.7969px;">92</td><td data-sheets-value="{"1":2,"2":"No Content Found"}" style="width: 20.7671%; height: 29.7969px;">No Content Found</td><td data-sheets-value="{"1":2,"2":"Websites with unrecognizable content, which does not allow them to categorize"}" style="width: 74.2885%; height: 29.7969px;">Websites with unrecognizable content, which does not allow categorization of them</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":93}" style="width: 4.94438%; height: 29.7969px;">93</td><td data-sheets-value="{"1":2,"2":"No Known Risk"}" style="width: 20.7671%; height: 29.7969px;">No Known Risk</td><td data-sheets-value="{"1":2,"2":"Websites that do not pose threats and do not fall into other categories"}" style="width: 74.2885%; height: 29.7969px;">Websites that do not pose threats and do not fall into other categories</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":94}" style="width: 4.94438%; height: 29.7969px;">94</td><td data-sheets-value="{"1":2,"2":"Non-profits"}" style="width: 20.7671%; height: 29.7969px;">Non-profits</td><td data-sheets-value="{"1":2,"2":"Websites of nonprofit organizations"}" style="width: 74.2885%; height: 29.7969px;">Websites of nonprofit organizations</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":95}" style="width: 4.94438%; height: 46.5938px;">95</td><td data-sheets-value="{"1":2,"2":"Non-traditional Religion & Occult"}" style="width: 20.7671%; height: 46.5938px;">Non-traditional Religion &amp; Occult</td><td data-sheets-value="{"1":2,"2":"Websites dedicated to religions that are not in the mainstream or not included in the top10 of world religions (folk religions, mysticism, cults and sects)"}" style="width: 74.2885%; height: 46.5938px;">Websites about religions that are not in the mainstream or not included in the top10 of world religions (folk religions, mysticism, cults, and sects)</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":96}" style="width: 4.94438%; height: 46.5938px;">96</td><td data-sheets-value="{"1":2,"2":"Nudity"}" style="width: 20.7671%; height: 46.5938px;">Nudity</td><td data-sheets-value="{"1":2,"2":"Websites containing erotic materials (partial or complete exposure), excluding pornographic materials"}" style="width: 74.2885%; height: 46.5938px;">Websites containing erotic materials (partial or complete exposure), excluding pornographic materials</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":97}" style="width: 4.94438%; height: 46.5938px;">97</td><td data-sheets-value="{"1":2,"2":"Nutrition & Diet"}" style="width: 20.7671%; height: 46.5938px;">Nutrition &amp; Diet</td><td data-sheets-value="{"1":2,"2":"Websites with information about healthy diet, weight loss, diets, weight loss programs and food allergies"}" style="width: 74.2885%; height: 46.5938px;">Websites with information about healthy diets, weight loss, weight loss programs, and food allergies</td></tr><tr style="height: 29.7969px;"><td class="align-center" data-sheets-value="{"1":3,"3":98}" style="width: 4.94438%; height: 29.7969px;">98</td><td data-sheets-value="{"1":2,"2":"Online Ads"}" style="width: 20.7671%; height: 29.7969px;">Online Ads</td><td data-sheets-value="{"1":2,"2":"Web pages strictly dedicated to advertising, banners or jumping windows with advertising"}" style="width: 74.2885%; height: 29.7969px;">Web pages strictly about advertising, banners, or popup windows with advertising</td></tr><tr style="height: 46.5938px;"><td class="align-center" data-sheets-value="{"1":3,"3":99}" style="width: 4.94438%; height: 46.5938px;">99</td><td data-sheets-value="{"1":2,"2":"Online Financial Tools & Quotes"}" style="width: 20.7671%; height: 46.5938px;">Online Financial Tools &amp; Quotes</td><td data-sheets-value="{"1":2,"2":"Websites containing information about financial quotes, as well as tools for financial analysis and budget planning, such as mortgage calculators, software for tax reporting, etc."}" style="width: 74.2885%; height: 46.5938px;"><div><div>Websites containing information about financial quotes, as well as tools for financial analysis and budget planning, such as mortgage calculators, software for tax reporting, etc.</div></div></td></tr><tr style="height: 46.5938px;"><td data-sheets-value="{"1":3,"3":100}" style="width: 4.94438%; height: 46.5938px;">100</td><td data-sheets-value="{"1":2,"2":"Online Information Management"}" style="width: 20.7671%; height: 46.5938px;">Online Information Management</td><td data-sheets-value="{"1":2,"2":"Websites devoted to programs for managing personal information, for example, application for managing tasks, calendars, address books, etc."}" style="width: 74.2885%; height: 46.5938px;">Websites about programs for managing personal information, for example, applications for managing tasks, calendars, address books, etc.</td></tr><tr style="height: 29.7969px;"><td data-sheets-value="{"1":3,"3":101}" style="width: 4.94438%; height: 29.7969px;">101</td><td data-sheets-value="{"1":2,"2":"Online Shopping"}" style="width: 20.7671%; height: 29.7969px;">Online Shopping</td><td data-sheets-value="{"1":2,"2":"Online stores and other sites offering online buying"}" style="width: 74.2885%; height: 29.7969px;">Online stores and other sites offering things online</td></tr><tr style="height: 29.7969px;"><td data-sheets-value="{"1":3,"3":102}" style="width: 4.94438%; height: 29.7969px;">102</td><td data-sheets-value="{"1":2,"2":"Online Stock Trading"}" style="width: 20.7671%; height: 29.7969px;">Online Stock Trading</td><td data-sheets-value="{"1":2,"2":"Websites of brokerage companies that carry out online securities, etc."}" style="width: 74.2885%; height: 29.7969px;">Websites of brokerage companies that carry out online securities, etc.</td></tr><tr style="height: 29.7969px;"><td data-sheets-value="{"1":3,"3":103}" style="width: 4.94438%; height: 29.7969px;">103</td><td data-sheets-value="{"1":2,"2":"Parked"}" style="width: 20.7671%; height: 29.7969px;">Parked</td><td data-sheets-value="{"1":2,"2":"Websites that are used as “plugs” for acquired but not used domain names"}" style="width: 74.2885%; height: 29.7969px;">Websites that are used as “plugs” for acquired but not used domain names</td></tr><tr style="height: 46.5938px;"><td data-sheets-value="{"1":3,"3":104}" style="width: 4.94438%; height: 46.5938px;">104</td><td data-sheets-value="{"1":2,"2":"Parks, Rec Facilities & Gyms"}" style="width: 20.7671%; height: 46.5938px;">Parks, Rec Facilities &amp; Gyms</td><td data-sheets-value="{"1":2,"2":"Websites dedicated to parks and other zones intended for wellness activities, such as swimming, skateboarding, mountaineering, etc."}" style="width: 74.2885%; height: 46.5938px;">Websites about parks and other zones intended for wellness activities, such as swimming, skateboarding, mountaineering, etc.</td></tr><tr style="height: 29.7969px;"><td data-sheets-value="{"1":3,"3":105}" style="width: 4.94438%; height: 29.7969px;">105</td><td data-sheets-value="{"1":2,"2":"Pay to Surf"}" style="width: 20.7671%; height: 29.7969px;">Pay to Surf</td><td data-sheets-value="{"1":2,"2":"Websites of companies offering to view advertising in their specialized applications"}" style="width: 74.2885%; height: 29.7969px;">Websites of companies offering to view advertising in their specialized applications</td></tr><tr style="height: 29.7969px;"><td data-sheets-value="{"1":3,"3":106}" style="width: 4.94438%; height: 29.7969px;">106</td><td data-sheets-value="{"1":2,"2":"Peer-to-Peer"}" style="width: 20.7671%; height: 29.7969px;">Peer-to-Peer</td><td data-sheets-value="{"1":2,"2":"Piring networks sites"}" style="width: 74.2885%; height: 29.7969px;">Peering networks sites</td></tr><tr style="height: 29.7969px;"><td data-sheets-value="{"1":3,"3":107}" style="width: 4.94438%; height: 29.7969px;">107</td><td data-sheets-value="{"1":2,"2":"Personal Pages & Blogs"}" style="width: 20.7671%; height: 29.7969px;">Personal Pages &amp; Blogs</td><td data-sheets-value="{"1":2,"2":"Personal and lifestyle content"}" style="width: 74.2885%; height: 29.7969px;">Personal and lifestyle content</td></tr><tr style="height: 29.7969px;"><td data-sheets-value="{"1":3,"3":108}" style="width: 4.94438%; height: 29.7969px;">108</td><td data-sheets-value="{"1":2,"2":"Personal Storage"}" style="width: 20.7671%; height: 29.7969px;">Personal Storage</td><td data-sheets-value="{"1":2,"2":"Websites for storing personal files"}" style="width: 74.2885%; height: 29.7969px;">Websites for storing personal files</td></tr><tr style="height: 46.5938px;"><td data-sheets-value="{"1":3,"3":109}" style="width: 4.94438%; height: 46.5938px;">109</td><td data-sheets-value="{"1":2,"2":"Personal Webpages"}" style="width: 20.7671%; height: 46.5938px;">Personal Webpages</td><td data-sheets-value="{"1":2,"2":"Personal pages, including blogs and other means of exchange of news, opinions and information about the author, as well as home and family pages"}" style="width: 74.2885%; height: 46.5938px;">Personal pages, including blogs and other means of exchange of news, opinions, and information about the author, as well as home and family pages</td></tr><tr style="height: 29.7969px;"><td data-sheets-value="{"1":3,"3":110}" style="width: 4.94438%; height: 29.7969px;">110</td><td data-sheets-value="{"1":2,"2":"Pets & Animals"}" style="width: 20.7671%; height: 29.7969px;">Pets &amp; Animals</td><td data-sheets-value="{"1":2,"2":"Websites containing information, products and services for pets"}" style="width: 74.2885%; height: 29.7969px;">Websites containing information, products, and services for pets</td></tr><tr style="height: 46.5938px;"><td data-sheets-value="{"1":3,"3":111}" style="width: 4.94438%; height: 46.5938px;">111</td><td data-sheets-value="{"1":2,"2":"Pharmacy"}" style="width: 20.7671%; height: 46.5938px;">Pharmacy</td><td data-sheets-value="{"1":2,"2":"Websites containing information about drugs (including legal narcotic substances), as well as their use"}" style="width: 74.2885%; height: 46.5938px;">Websites containing information about drugs (including legal narcotic substances), as well as their use</td></tr><tr style="height: 46.5938px;"><td data-sheets-value="{"1":3,"3":112}" style="width: 4.94438%; height: 46.5938px;">112</td><td data-sheets-value="{"1":2,"2":"Philantropic Organizations"}" style="width: 20.7671%; height: 46.5938px;">Philanthropic Organizations</td><td data-sheets-value="{"1":2,"2":"Websites with information about charitable institutions and other non -profit philanthropic organizations"}" style="width: 74.2885%; height: 46.5938px;">Websites with information about charitable institutions and other non-profit philanthropic organizations</td></tr><tr style="height: 63.3906px;"><td data-sheets-value="{"1":3,"3":113}" style="width: 4.94438%; height: 63.3906px;">113</td><td data-sheets-value="{"1":2,"2":"Phishing/Fraud"}" style="width: 20.7671%; height: 63.3906px;">Phishing/Fraud</td><td data-sheets-value="{"1":2,"2":"Websites used for fraud are also known as phishing. As a rule, they are represented by official web pages of financial or other institutions with the aim of unauthorized access to confidential information, for example, Pin-codes of bank cards"}" style="width: 74.2885%; height: 63.3906px;"><div><div>Websites used for fraud are also known as phishing. Usually, they look like official web pages of financial or other institutions with the aim of unauthorized access to confidential information, for example, CVV codes of bank cards</div></div></td></tr><tr style="height: 46.5938px;"><td data-sheets-value="{"1":3,"3":114}" style="width: 4.94438%; height: 46.5938px;">114</td><td data-sheets-value="{"1":2,"2":"Photo Sharing"}" style="width: 20.7671%; height: 46.5938px;">Photo Sharing</td><td data-sheets-value="{"1":2,"2":"Websites on which users can place digital photos, as well as search for images, exchange them, etc."}" style="width: 74.2885%; height: 46.5938px;">Websites on which users can place digital photos, as well as search for images, exchange them, etc.</td></tr><tr style="height: 29.7969px;"><td data-sheets-value="{"1":3,"3":115}" style="width: 4.94438%; height: 29.7969px;">115</td><td data-sheets-value="{"1":2,"2":"Physical Security"}" style="width: 20.7671%; height: 29.7969px;">Physical Security</td><td data-sheets-value="{"1":2,"2":"Websites related to products and services regarding security, with the exception of computer"}" style="width: 74.2885%; height: 29.7969px;">Websites related to products and services regarding security, with the exception of computer security</td></tr><tr style="height: 46.5938px;"><td data-sheets-value="{"1":3,"3":116}" style="width: 4.94438%; height: 46.5938px;">116</td><td data-sheets-value="{"1":2,"2":"Piracy & Copyright Theft"}" style="width: 20.7671%; height: 46.5938px;">Piracy &amp; Copyright Theft</td><td data-sheets-value="{"1":2,"2":"Websites that provide access to illegal content, for example, pirate software (Warez), pirate films, music, etc."}" style="width: 74.2885%; height: 46.5938px;">Websites that provide access to an illegal content, for example, pirated software (Warez), pirated films, music, etc.</td></tr><tr style="height: 29.7969px;"><td data-sheets-value="{"1":3,"3":117}" style="width: 4.94438%; height: 29.7969px;">117</td><td data-sheets-value="{"1":2,"2":"Politics and Law"}" style="width: 20.7671%; height: 29.7969px;">Politics and Law</td><td data-sheets-value="{"1":2,"2":"Websites on politics and legislation"}" style="width: 74.2885%; height: 29.7969px;">Websites on politics and legislation</td></tr><tr style="height: 46.5938px;"><td data-sheets-value="{"1":3,"3":118}" style="width: 4.94438%; height: 46.5938px;">118</td><td data-sheets-value="{"1":2,"2":"Pornography"}" style="width: 20.7671%; height: 46.5938px;">Pornography</td><td data-sheets-value="{"1":2,"2":"Websites containing images or videos with a frank demonstration of sexual intercourse or a naked body"}" style="width: 74.2885%; height: 46.5938px;">Websites containing images or videos with a demonstration of sexual intercourse or a naked body</td></tr><tr style="height: 29.7969px;"><td data-sheets-value="{"1":3,"3":119}" style="width: 4.94438%; height: 29.7969px;">119</td><td data-sheets-value="{"1":2,"2":"Pornography/Sex"}" style="width: 20.7671%; height: 29.7969px;">Pornography/Sex</td><td data-sheets-value="{"1":2,"2":"Websites containing images or video with a naked body"}" style="width: 74.2885%; height: 29.7969px;">Websites containing images or videos with a naked body</td></tr><tr style="height: 46.5938px;"><td data-sheets-value="{"1":3,"3":120}" style="width: 4.94438%; height: 46.5938px;">120</td><td data-sheets-value="{"1":2,"2":"Portal Sites"}" style="width: 20.7671%; height: 46.5938px;">Portal Sites</td><td data-sheets-value="{"1":2,"2":"Web resources that provide access to custom-made personal portals, including yellow pages and other catalogs"}" style="width: 74.2885%; height: 46.5938px;">Web resources that provide access to custom-made personal portals, including yellow pages and other catalogs</td></tr><tr style="height: 29.7969px;"><td data-sheets-value="{"1":3,"3":121}" style="width: 4.94438%; height: 29.7969px;">121</td><td data-sheets-value="{"1":2,"2":"Possible Risk"}" style="width: 20.7671%; height: 29.7969px;">Possible Risk</td><td data-sheets-value="{"1":2,"2":"Websites with the possibly risky contents"}" style="width: 74.2885%; height: 29.7969px;">Websites with the possibly risky contents</td></tr><tr style="height: 29.7969px;"><td data-sheets-value="{"1":3,"3":122}" style="width: 4.94438%; height: 29.7969px;">122</td><td data-sheets-value="{"1":2,"2":"Private IP Address"}" style="width: 20.7671%; height: 29.7969px;">Private IP Address</td><td data-sheets-value="{"1":2,"2":"Websites served on private IP addresses reserved for use within organizations and houses"}" style="width: 74.2885%; height: 29.7969px;">Websites served on private IP addresses reserved for use within organizations and houses</td></tr><tr style="height: 46.5938px;"><td data-sheets-value="{"1":3,"3":123}" style="width: 4.94438%; height: 46.5938px;">123</td><td data-sheets-value="{"1":2,"2":"Product Reviews & Price Comparisons"}" style="width: 20.7671%; height: 46.5938px;">Product Reviews &amp; Price Comparisons</td><td data-sheets-value="{"1":2,"2":"Websites designed to help customers compare shops, products and prices, but not selling online"}" style="width: 74.2885%; height: 46.5938px;">Websites designed to help customers compare shops, products, and prices, but not selling online</td></tr><tr style="height: 29.7969px;"><td data-sheets-value="{"1":3,"3":124}" style="width: 4.94438%; height: 29.7969px;">124</td><td data-sheets-value="{"1":2,"2":"Profanity"}" style="width: 20.7671%; height: 29.7969px;">Profanity</td><td data-sheets-value="{"1":2,"2":"Websites containing episodic or serious blasphemy"}" style="width: 74.2885%; height: 29.7969px;">Websites containing episodic or serious swearing or blasphemy</td></tr><tr style="height: 29.7969px;"><td data-sheets-value="{"1":3,"3":125}" style="width: 4.94438%; height: 29.7969px;">125</td><td data-sheets-value="{"1":2,"2":"Professional Networking"}" style="width: 20.7671%; height: 29.7969px;">Professional Networking</td><td data-sheets-value="{"1":2,"2":"Websites of social networks focused on professionals and building business relations"}" style="width: 74.2885%; height: 29.7969px;">Websites of social networks focused on professionals and building business relations</td></tr><tr style="height: 46.5938px;"><td data-sheets-value="{"1":3,"3":126}" style="width: 4.94438%; height: 46.5938px;">126</td><td data-sheets-value="{"1":2,"2":"R-Rated"}" style="width: 20.7671%; height: 46.5938px;">R-Rated</td><td data-sheets-value="{"1":2,"2":"Websites, the content of which must contain material intended only for an adult audience. There can be affected sexual topics or not training materials"}" style="width: 74.2885%; height: 46.5938px;">Websites, the content of which must contain material intended only for an adult audience. There can be sexual topics or training materials</td></tr><tr style="height: 29.7969px;"><td data-sheets-value="{"1":3,"3":127}" style="width: 4.94438%; height: 29.7969px;">127</td><td data-sheets-value="{"1":2,"2":"Real Estate"}" style="width: 20.7671%; height: 29.7969px;">Real Estate</td><td data-sheets-value="{"1":2,"2":"Websites devoted to real estate issues (purchase, sale, rent, etc.)"}" style="width: 74.2885%; height: 29.7969px;">Websites about real estate issues (purchase, sale, rent, etc.)</td></tr><tr style="height: 29.7969px;"><td data-sheets-value="{"1":3,"3":128}" style="width: 4.94438%; height: 29.7969px;">128</td><td data-sheets-value="{"1":2,"2":"Redirect"}" style="width: 20.7671%; height: 29.7969px;">Redirect</td><td data-sheets-value="{"1":2,"2":"Websites redirecting the visitor to other resources"}" style="width: 74.2885%; height: 29.7969px;">Websites that redirect visitors to other resources</td></tr><tr style="height: 46.5938px;"><td data-sheets-value="{"1":3,"3":129}" style="width: 4.94438%; height: 46.5938px;">129</td><td data-sheets-value="{"1":2,"2":"Reference Materials & Maps"}" style="width: 20.7671%; height: 46.5938px;">Reference Materials &amp; Maps</td><td data-sheets-value="{"1":2,"2":"Websites containing reference materials and data sets: atlases, dictionaries, encyclopedias, census, etc."}" style="width: 74.2885%; height: 46.5938px;">Websites containing reference materials and data sets: atlases, dictionaries, encyclopedias, census, etc.</td></tr><tr style="height: 29.7969px;"><td data-sheets-value="{"1":3,"3":130}" style="width: 4.94438%; height: 29.7969px;">130</td><td data-sheets-value="{"1":2,"2":"Religion"}" style="width: 20.7671%; height: 29.7969px;">Religion</td><td data-sheets-value="{"1":2,"2":"Websites about a specific religion"}" style="width: 74.2885%; height: 29.7969px;">Websites about a specific religion</td></tr><tr style="height: 29.7969px;"><td data-sheets-value="{"1":3,"3":131}" style="width: 4.94438%; height: 29.7969px;">131</td><td data-sheets-value="{"1":2,"2":"Religions"}" style="width: 20.7671%; height: 29.7969px;">Religions</td><td data-sheets-value="{"1":2,"2":"Websites about the main world religions, as well as general -religious topics and theological"}" style="width: 74.2885%; height: 29.7969px;">Websites about the main world religions, as well as general religious and theological topics</td></tr><tr style="height: 46.5938px;"><td data-sheets-value="{"1":3,"3":132}" style="width: 4.94438%; height: 46.5938px;">132</td><td data-sheets-value="{"1":2,"2":"Remote access"}" style="width: 20.7671%; height: 46.5938px;">Remote access</td><td data-sheets-value="{"1":2,"2":"Websites that provide remote access to private computers and networks, intranset resources (files and web applications)"}" style="width: 74.2885%; height: 46.5938px;">Websites that provide remote access to private computers and networks, intranet resources (files and web applications)</td></tr><tr style="height: 29.7969px;"><td data-sheets-value="{"1":3,"3":133}" style="width: 4.94438%; height: 29.7969px;">133</td><td data-sheets-value="{"1":2,"2":"Restaurants"}" style="width: 20.7671%; height: 29.7969px;">Restaurants</td><td data-sheets-value="{"1":2,"2":"Restaurant sites"}" style="width: 74.2885%; height: 29.7969px;">Restaurant websites</td></tr><tr style="height: 46.5938px;"><td data-sheets-value="{"1":3,"3":134}" style="width: 4.94438%; height: 46.5938px;">134</td><td data-sheets-value="{"1":2,"2":"Retirement Homes & Assisted Living"}" style="width: 20.7671%; height: 46.5938px;">Retirement Homes &amp; Assisted Living</td><td data-sheets-value="{"1":2,"2":"Websites about nursing houses and thematic communities, including patient care and hospice assistance"}" style="width: 74.2885%; height: 46.5938px;">Websites about nursing houses and thematic communities, including patient care and hospice assistance</td></tr><tr style="height: 46.5938px;"><td data-sheets-value="{"1":3,"3":135}" style="width: 4.94438%; height: 46.5938px;">135</td><td data-sheets-value="{"1":2,"2":"School Cheating"}" style="width: 20.7671%; height: 46.5938px;">School Cheating</td><td data-sheets-value="{"1":2,"2":"Websites with answers to tests, ready -made works, step -by -step solutions to problems and similar resources that can be used to write off"}" style="width: 74.2885%; height: 46.5938px;">Websites with answers to tests, ready-made works, step-by-step solutions to problems, and similar resources</td></tr><tr style="height: 29.7969px;"><td data-sheets-value="{"1":3,"3":136}" style="width: 4.94438%; height: 29.7969px;">136</td><td data-sheets-value="{"1":2,"2":"Search Engines"}" style="width: 20.7671%; height: 29.7969px;">Search Engines</td><td data-sheets-value="{"1":2,"2":"Search systems that search for Websites, news groups, pictures and other content"}" style="width: 74.2885%; height: 29.7969px;">Search systems that search for websites, news groups, pictures, and other content</td></tr><tr style="height: 46.5938px;"><td data-sheets-value="{"1":3,"3":137}" style="width: 4.94438%; height: 46.5938px;">137</td><td data-sheets-value="{"1":2,"2":"Self-help & Addiction"}" style="width: 20.7671%; height: 46.5938px;">Self-help &amp; Addiction</td><td data-sheets-value="{"1":2,"2":"Websites offering information and assistance in alcoholic, drug, gaming dependencies, as well as eating disorders (anorexia, etc.)"}" style="width: 74.2885%; height: 46.5938px;">Websites offering information and assistance in alcohol, drug, gaming dependencies, as well as eating disorders (anorexia, etc.)</td></tr><tr style="height: 46.5938px;"><td data-sheets-value="{"1":3,"3":138}" style="width: 4.94438%; height: 46.5938px;">138</td><td data-sheets-value="{"1":2,"2":"Sex & Erotic"}" style="width: 20.7671%; height: 46.5938px;">Sex &amp; Erotic</td><td data-sheets-value="{"1":2,"2":"Websites offering products and services related to sex, but not containing naked nature and other candid images"}" style="width: 74.2885%; height: 46.5938px;">Websites offering products and services related to sex, but not containing naked nature and other candid images</td></tr><tr style="height: 46.5938px;"><td data-sheets-value="{"1":3,"3":139}" style="width: 4.94438%; height: 46.5938px;">139</td><td data-sheets-value="{"1":2,"2":"Sex Education & Pregnancy"}" style="width: 20.7671%; height: 46.5938px;">Sex Education &amp; Pregnancy</td><td data-sheets-value="{"1":2,"2":"Websites with teaching materials and clinical explanations about sex, safe sex, pregnancy, childbirth, etc., focused on children and adolescents"}" style="width: 74.2885%; height: 46.5938px;">Websites with teaching materials and clinical explanations about sex, safe sex, pregnancy, childbirth, etc.</td></tr><tr style="height: 46.5938px;"><td data-sheets-value="{"1":3,"3":140}" style="width: 4.94438%; height: 46.5938px;">140</td><td data-sheets-value="{"1":2,"2":"Shipping & Logistics"}" style="width: 20.7671%; height: 46.5938px;">Shipping &amp; Logistics</td><td data-sheets-value="{"1":2,"2":"Websites on stock management, including transportation, warehouse, distribution, storage, execution and delivery of orders"}" style="width: 74.2885%; height: 46.5938px;">Websites on stock management, including transportation, warehouse, distribution, storage, execution, and delivery of orders</td></tr><tr style="height: 29.7969px;"><td data-sheets-value="{"1":3,"3":141}" style="width: 4.94438%; height: 29.7969px;">141</td><td data-sheets-value="{"1":2,"2":"Shopping"}" style="width: 20.7671%; height: 29.7969px;">Shopping</td><td data-sheets-value="{"1":2,"2":"Online shopping and purchases"}" style="width: 74.2885%; height: 29.7969px;">Online shopping and purchases</td></tr><tr style="height: 46.5938px;"><td data-sheets-value="{"1":3,"3":142}" style="width: 4.94438%; height: 46.5938px;">142</td><td data-sheets-value="{"1":2,"2":"Sites from list of Ministery of Justice"}" style="width: 20.7671%; height: 46.5938px;">Sites from the list of the Ministery of Justice</td><td data-sheets-value="{"1":2,"2":"Federal list of extremist materials compiled by the Ministry of Justice of Russia"}" style="width: 74.2885%; height: 46.5938px;">Additional blocklist for specific regions</td></tr><tr style="height: 46.5938px;"><td data-sheets-value="{"1":3,"3":143}" style="width: 4.94438%; height: 46.5938px;">143</td><td data-sheets-value="{"1":2,"2":"Social and Affiliation Organizations"}" style="width: 20.7671%; height: 46.5938px;">Social and Affiliation Organizations</td><td data-sheets-value="{"1":2,"2":"Websites of social and affiliated organizations"}" style="width: 74.2885%; height: 46.5938px;">Websites of social and affiliated organizations</td></tr><tr style="height: 29.7969px;"><td data-sheets-value="{"1":3,"3":144}" style="width: 4.94438%; height: 29.7969px;">144</td><td data-sheets-value="{"1":2,"2":"Social Networking"}" style="width: 20.7671%; height: 29.7969px;">Social Networking</td><td data-sheets-value="{"1":2,"2":"Websites of social networks - communities in which people are \"friends\" among themselves"}" style="width: 74.2885%; height: 29.7969px;">Websites of social networks - communities in which people are "friends"</td></tr><tr style="height: 46.5938px;"><td data-sheets-value="{"1":3,"3":145}" style="width: 4.94438%; height: 46.5938px;">145</td><td data-sheets-value="{"1":2,"2":"Software, Hardware & Electronics"}" style="width: 20.7671%; height: 46.5938px;">Software, Hardware &amp; Electronics</td><td data-sheets-value="{"1":2,"2":"Site about computer equipment, software, periphery, data networks, electronics, as well as manufacturers of appropriate goods and services"}" style="width: 74.2885%; height: 46.5938px;">Site about computer equipment, software, peripherals, data networks, and electronics, as well as manufacturers of appropriate goods and services</td></tr><tr style="height: 29.7969px;"><td data-sheets-value="{"1":3,"3":146}" style="width: 4.94438%; height: 29.7969px;">146</td><td data-sheets-value="{"1":2,"2":"Spam"}" style="width: 20.7671%; height: 29.7969px;">Spam</td><td data-sheets-value="{"1":2,"2":"Websites advertised using spam"}" style="width: 74.2885%; height: 29.7969px;">Websites advertised using spam</td></tr><tr style="height: 29.7969px;"><td data-sheets-value="{"1":3,"3":147}" style="width: 4.94438%; height: 29.7969px;">147</td><td data-sheets-value="{"1":2,"2":"Sport and Recreation"}" style="width: 20.7671%; height: 29.7969px;">Sport and Recreation</td><td data-sheets-value="{"1":2,"2":"Websites devoted to training and competitions in martial arts: boxing, struggle, fencing, etc."}" style="width: 74.2885%; height: 29.7969px;">Websites about training and competitions in martial arts: boxing, struggle, fencing, etc.</td></tr><tr style="height: 46.5938px;"><td data-sheets-value="{"1":3,"3":148}" style="width: 4.94438%; height: 46.5938px;">148</td><td data-sheets-value="{"1":2,"2":"Spyware & Questionable Software"}" style="width: 20.7671%; height: 46.5938px;">Spyware &amp; Questionable Software</td><td data-sheets-value="{"1":2,"2":"Websites with software sending information to the central server, including spy software and keyboard spies"}" style="width: 74.2885%; height: 46.5938px;">Websites with software sending information to the central server, including spy software and keyboard spies</td></tr><tr style="height: 46.5938px;"><td data-sheets-value="{"1":3,"3":149}" style="width: 4.94438%; height: 46.5938px;">149</td><td data-sheets-value="{"1":2,"2":"Spyware and Malicious Sites"}" style="width: 20.7671%; height: 46.5938px;">Spyware and Malicious Sites</td><td data-sheets-value="{"1":2,"2":"Websites identified as spy, sending information about the visitor to a special address"}" style="width: 74.2885%; height: 46.5938px;">Websites that are spying, sending information about the visitor to a special address</td></tr><tr style="height: 46.5938px;"><td data-sheets-value="{"1":3,"3":150}" style="width: 4.94438%; height: 46.5938px;">150</td><td data-sheets-value="{"1":2,"2":"Streaming & Downloadable Audio"}" style="width: 20.7671%; height: 46.5938px;">Streaming &amp; Downloadable Audio</td><td data-sheets-value="{"1":2,"2":"Storage sites broadcasting music or other audio content (can consume the entire available width of the company's channel)"}" style="width: 74.2885%; height: 46.5938px;">Storage sites broadcasting music or other audio content (can consume the entire available bandwidth of the company's channel)</td></tr><tr style="height: 46.5938px;"><td data-sheets-value="{"1":3,"3":151}" style="width: 4.94438%; height: 46.5938px;">151</td><td data-sheets-value="{"1":2,"2":"Streaming & Downloadable Video"}" style="width: 20.7671%; height: 46.5938px;">Streaming &amp; Downloadable Video</td><td data-sheets-value="{"1":2,"2":"Storage sites broadcasting videos, including in a browser (can consume the entire available width of the company's channel)"}" style="width: 74.2885%; height: 46.5938px;">Storage sites broadcasting videos, including streaming (can consume the entire available bandwidth of the company's channel)</td></tr><tr style="height: 46.5938px;"><td data-sheets-value="{"1":3,"3":152}" style="width: 4.94438%; height: 46.5938px;">152</td><td data-sheets-value="{"1":2,"2":"Supplements & Compounds"}" style="width: 20.7671%; height: 46.5938px;">Supplements &amp; Compounds</td><td data-sheets-value="{"1":2,"2":"Websites containing information about vitamins and other substances of unregulated turnover"}" style="width: 74.2885%; height: 46.5938px;">Websites containing information about vitamins and other substances of unregulated turnover</td></tr><tr style="height: 46.5938px;"><td data-sheets-value="{"1":3,"3":153}" style="width: 4.94438%; height: 46.5938px;">153</td><td data-sheets-value="{"1":2,"2":"Swimsuits"}" style="width: 20.7671%; height: 46.5938px;">Swimsuits</td><td data-sheets-value="{"1":2,"2":"Websites containing images of people in bathing suits. Images of costumes themselves do not fall into this category"}" style="width: 74.2885%; height: 46.5938px;">Websites containing images of people in bathing suits. Images of costumes themselves do not fall into this category</td></tr><tr style="height: 46.5938px;"><td data-sheets-value="{"1":3,"3":154}" style="width: 4.94438%; height: 46.5938px;">154</td><td data-sheets-value="{"1":2,"2":"Technology (General)"}" style="width: 20.7671%; height: 46.5938px;">Technology (General)</td><td data-sheets-value="{"1":2,"2":"Websites devoted to web design, standardization on the Internet (for example, RFC), protocol specifications, news and other wide discussions of technology"}" style="width: 74.2885%; height: 46.5938px;">Websites about web design, standardization on the Internet (for example, RFC), protocol specifications, news, and other wide discussions of technology</td></tr><tr style="height: 46.5938px;"><td data-sheets-value="{"1":3,"3":155}" style="width: 4.94438%; height: 46.5938px;">155</td><td data-sheets-value="{"1":2,"2":"Television & Movies"}" style="width: 20.7671%; height: 46.5938px;">Television &amp; Movies</td><td data-sheets-value="{"1":2,"2":"Websites about television shows and films, including reviews, programs, plots, discussions, trailers, marketing, etc."}" style="width: 74.2885%; height: 46.5938px;">Websites about television shows and films, including reviews, programs, plots, discussions, trailers, marketing, etc.</td></tr><tr style="height: 46.5938px;"><td data-sheets-value="{"1":3,"3":156}" style="width: 4.94438%; height: 46.5938px;">156</td><td data-sheets-value="{"1":2,"2":"Text Messaging & SMS"}" style="width: 20.7671%; height: 46.5938px;">Text Messaging &amp; SMS</td><td data-sheets-value="{"1":2,"2":"Websites designed to exchange short text messages (SMS) between a web page and a mobile phone"}" style="width: 74.2885%; height: 46.5938px;">Websites designed to exchange short text messages (SMS) between a web page and a mobile phone</td></tr><tr style="height: 29.7969px;"><td data-sheets-value="{"1":3,"3":157}" style="width: 4.94438%; height: 29.7969px;">157</td><td data-sheets-value="{"1":2,"2":"Tobacco"}" style="width: 20.7671%; height: 29.7969px;">Tobacco</td><td data-sheets-value="{"1":2,"2":"Websites calling for tobacco products (cigarettes, cigars, tubes, etc.)"}" style="width: 74.2885%; height: 29.7969px;">Websites about tobacco products (cigarettes, cigars, vapes, etc.)</td></tr><tr style="height: 46.5938px;"><td data-sheets-value="{"1":3,"3":158}" style="width: 4.94438%; height: 46.5938px;">158</td><td data-sheets-value="{"1":2,"2":"Torrent Repository"}" style="width: 20.7671%; height: 46.5938px;">Torrent Repository</td><td data-sheets-value="{"1":2,"2":"Websites that place torrent files that allow you to download potentially large files by P2P networks"}" style="width: 74.2885%; height: 46.5938px;">Websites that host torrent files that allow you to download potentially large files via P2P networks</td></tr><tr style="height: 29.7969px;"><td data-sheets-value="{"1":3,"3":159}" style="width: 4.94438%; height: 29.7969px;">159</td><td data-sheets-value="{"1":2,"2":"Toys"}" style="width: 20.7671%; height: 29.7969px;">Toys</td><td data-sheets-value="{"1":2,"2":"Websites of toy manufacturers, as well as marketing resources and online toy stores"}" style="width: 74.2885%; height: 29.7969px;">Websites of toy manufacturers, as well as marketing resources and online toy stores</td></tr><tr style="height: 29.7969px;"><td data-sheets-value="{"1":3,"3":160}" style="width: 4.94438%; height: 29.7969px;">160</td><td data-sheets-value="{"1":2,"2":"Translator"}" style="width: 20.7671%; height: 29.7969px;">Translator</td><td data-sheets-value="{"1":2,"2":"Dictionaries and translators from foreign languages"}" style="width: 74.2885%; height: 29.7969px;">Dictionaries and translators from foreign languages</td></tr><tr style="height: 46.5938px;"><td data-sheets-value="{"1":3,"3":161}" style="width: 4.94438%; height: 46.5938px;">161</td><td data-sheets-value="{"1":2,"2":"Travel"}" style="width: 20.7671%; height: 46.5938px;">Travel</td><td data-sheets-value="{"1":2,"2":"Websites providing travel information and tourism, as well as an online order of air tickets, hotels, cars, etc."}" style="width: 74.2885%; height: 46.5938px;">Websites about travel information and tourism, as well as online orders of plane tickets, hotels, cars, etc.</td></tr><tr style="height: 29.7969px;"><td data-sheets-value="{"1":3,"3":162}" style="width: 4.94438%; height: 29.7969px;">162</td><td data-sheets-value="{"1":2,"2":"Unknown Sites"}" style="width: 20.7671%; height: 29.7969px;">Unknown Sites</td><td data-sheets-value="{"1":2,"2":"Websites without category"}" style="width: 74.2885%; height: 29.7969px;">Websites without category</td></tr><tr style="height: 46.5938px;"><td data-sheets-value="{"1":3,"3":163}" style="width: 4.94438%; height: 46.5938px;">163</td><td data-sheets-value="{"1":2,"2":"Unreachable"}" style="width: 20.7671%; height: 46.5938px;">Unreachable</td><td data-sheets-value="{"1":2,"2":"Websites for which the appeal leads to errors “The connection time expired”, “the address is not found”, etc."}" style="width: 74.2885%; height: 46.5938px;">Websites that display errors such as “The connection time expired”, “the address is not found”, etc.</td></tr><tr style="height: 29.7969px;"><td data-sheets-value="{"1":3,"3":164}" style="width: 4.94438%; height: 29.7969px;">164</td><td data-sheets-value="{"1":2,"2":"Violence"}" style="width: 20.7671%; height: 29.7969px;">Violence</td><td data-sheets-value="{"1":2,"2":"Websites containing calls for dubious actions, such as violence and aggression"}" style="width: 74.2885%; height: 29.7969px;">Websites about dubious actions, such as violence and aggression</td></tr><tr style="height: 29.7969px;"><td data-sheets-value="{"1":3,"3":165}" style="width: 4.94438%; height: 29.7969px;">165</td><td data-sheets-value="{"1":2,"2":"Weapons"}" style="width: 20.7671%; height: 29.7969px;">Weapons</td><td data-sheets-value="{"1":2,"2":"Websites dedicated to weapons as such. Do not contain calls for its illegal use"}" style="width: 74.2885%; height: 29.7969px;">Websites about weapons</td></tr><tr style="height: 46.5938px;"><td data-sheets-value="{"1":3,"3":166}" style="width: 4.94438%; height: 46.5938px;">166</td><td data-sheets-value="{"1":2,"2":"Web Hosting, ISP & Telco"}" style="width: 20.7671%; height: 46.5938px;">Web Hosting, ISP &amp; Telco</td><td data-sheets-value="{"1":2,"2":"Websites offering web-hosting services, blogging blogs, Internet providers and telecommunication companies"}" style="width: 74.2885%; height: 46.5938px;">Websites offering web-hosting services, blogging blogs, Internet providers, and telecommunication companies</td></tr><tr style="height: 29.7969px;"><td data-sheets-value="{"1":3,"3":167}" style="width: 4.94438%; height: 29.7969px;">167</td><td data-sheets-value="{"1":2,"2":"Web-based Email"}" style="width: 20.7671%; height: 29.7969px;">Web-based Email</td><td data-sheets-value="{"1":2,"2":"Services providing web access to mailboxes. As a rule, we are talking about free boxes"}" style="width: 74.2885%; height: 29.7969px;">Services providing web access to mailboxes</td></tr><tr style="height: 46.5938px;"><td data-sheets-value="{"1":3,"3":168}" style="width: 4.94438%; height: 46.5938px;">168</td><td data-sheets-value="{"1":2,"2":"Web-based Greeting Cards"}" style="width: 20.7671%; height: 46.5938px;">Web-based Greeting Cards</td><td data-sheets-value="{"1":2,"2":"Websites that allow users to send and accept postcards"}" style="width: 74.2885%; height: 46.5938px;">Websites that allow users to send and accept postcards online</td></tr><tr style="height: 46.5938px;"><td data-sheets-value="{"1":3,"3":169}" style="width: 4.94438%; height: 46.5938px;">169</td><td data-sheets-value="{"1":2,"2":"Wikis"}" style="width: 20.7671%; height: 46.5938px;">Wikis</td><td data-sheets-value="{"1":2,"2":"Websites and resources of communities creating information documents available for editing all participants"}" style="width: 74.2885%; height: 46.5938px;">Websites and resources of communities creating information documents available for editing for all participants</td></tr></tbody></table>

# Setting up HTTPS Filtering

HTTPS traffic filtering provides the possibility for further processing of websites accessible via HTTPS.

---

Filtering is implemented by several methods:

- Analysis of Server Name Indication (SNI) headings. Thanks to this method, it is possible to analyze the domain to which the client connects without certificate substitution and interference with HTTPS traffic. Domains specified in the certificate are also analyzed.
- SSL-Bump Method. Filtering occurs by substitution on the fly of the certificate used to sign the requested site. The original site certificate is substituted by a new one signed by the SafeUTM root certificate instead of a certificate authority. Thus, the traffic transmitted over a secure HTTPS connection becomes available for processing by all modules provided by SafeUTM, namely by the content filter (it is possible to categorize the full URL of the query and MIME-type content), ClamAV, as well as external ICAP services.

<p class="callout info">The specifics of implementing HTTPS traffic filtering with certificate substitution require configuring both sides of the connection – the SafeUTM server and each user’s workstation in the local network.</p>

---

#### Setting up SafeUTM Server

By default, the server performs HTTPS filtering without certificate substitution by analyzing SNI and domains in the certificate.

HTTPS traffic decryption is configured in **Rules -&gt; Content Filter -&gt; Rules** using the rules created by the admin with the action **Decrypt**.

An example of a decryption rule can be seen below:  
[![1. Setting up HTTPS Filtering.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/69VqxrjmzUp2cBOs-1-setting-up-https-filtering.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/69VqxrjmzUp2cBOs-1-setting-up-https-filtering.png)

---

#### Setting up the User’s Workstation

When the HTTPS traffic decryption option is enabled, the browser and other network software (for example, antiviruses, IM clients, etc.) on the user’s workstation will require explicit confirmation to use a substitute certificate created and issued by the SafeUTM server. To improve the user’s convenience, the SafeUTM server’s root certificate should be installed in the workstation’s operating system and made trusted. The root SSL certificate is available for download from the section **Traffic Rules -&gt; Content Filter -&gt; Settings**.

In order to install the root certificate, you need to follow these steps:

1\. Download the root SSL certificate by opening the SafeUTM web interface section **Traffic Rules -&gt; Content Filtering -&gt; Settings**:  
[![2. Setting up HTTPS Filtering.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/WnSlB4Y1vtNIcl4b-2-setting-up-https-filtering.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/WnSlB4Y1vtNIcl4b-2-setting-up-https-filtering.png)

2\. Open the certificate management center on the workstation **Start -&gt; Run** by executing the command **certmgr.msc** in the dialog:  
[![3. Setting up HTTPS Filtering.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/jmF3ixUhsDhHjZEt-3-setting-up-https-filtering.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/jmF3ixUhsDhHjZEt-3-setting-up-https-filtering.png)

3\. Select the section **Trusted Root Certificates -&gt; Certificates**:  
[![4. Setting up HTTPS Filtering - Copy.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/YfUcnbImr76fEWg8-4-setting-up-https-filtering-copy.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/YfUcnbImr76fEWg8-4-setting-up-https-filtering-copy.png)

4\. In the right part of the window, right-click and select action **All Tasks -&gt; Import...** The Certificate Import Wizard will open. Follow the wizard’s instructions to import the SafeUTM server’s root certificate. The imported certificate will appear on the list in the right part of the window:  
[![5. Setting up HTTPS Filtering - Copy.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/22VkfrTbp4UZxdLA-5-setting-up-https-filtering-copy.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/22VkfrTbp4UZxdLA-5-setting-up-https-filtering-copy.png)

---

#### Adding Certificate via Microsoft Active Directory Domain Policies

In networks where users are managed using Microsoft Active Directory, you can install a SafeUTM certificate for all users automatically using Active Directory. To do this, follow these steps:

1\. Download the root SSL certificate by opening the SafeUTM interface section **Access rules -&gt; Content Filtering -&gt; Settings**:  
[![6. Setting up HTTPS Filtering.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/BR8WTP5D93uCoJgi-6-setting-up-https-filtering.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/BR8WTP5D93uCoJgi-6-setting-up-https-filtering.png)

2\. Log in to the domain controller with administrator privileges.

3\. Launch the group policy management snap-in by executing the command **gpmc.msc**.

4\. Find **the domain policy** used on users’ computers in **Group Policy Objects** (Default Domain Policy in the screenshot). Right-click on it and select **Change**.

5\. In the group policy management editor that opens, select: **Computer Configuration -&gt; Policies -&gt; Windows Configuration -&gt; Security Settings -&gt; Public Key Policies -&gt; Trusted Root Certificate Authorities**.

6\. Right-click on the list that opens, select **Import...** and import the SafeUTM key.  
[![7. Setting up HTTPS Filtering.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/qzxqH7TEq6dlpYKY-7-setting-up-https-filtering.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/qzxqH7TEq6dlpYKY-7-setting-up-https-filtering.png)

7\. After restarting workstations or executing the command **gpupdate /force** on them, the certificate will appear in the local certificate stores and the required level of trust will be established for it.

---

#### Possible Problems and Troubleshooting

- Some browsers, such as Mozilla Firefox, do not use the system certificate store, in which case it is necessary to add a SafeUTM certificate to the browser’s trusted certificates. In Firefox, you can also set the parameter **security.enterprise\_roots.enabled** (in **about:config**) to **true** for trusting system certificates.
- If the local machine uses an antivirus that checks HTTPS traffic using certificate substitution, sites may not open because of double certificate substitution. HTTPS traffic check must be disabled in the antivirus settings.
- With SNI filtering enabled, the server will not allow non-HTTPS traffic through the HTTPS port. Thus, problems with programs trying to do this may occur. In order for them to run, is necessary to allow bypassing the proxy server to the resources they require.
- When blocking HTTPS resources, in order to display the blocking page, it is necessary to set up trusting the UTM root SSL certificate even if only SNI filtering is enabled, as in case the resource opened via HTTPS is blocked, SSL-bumping with UTM SSL-certificate replacement will be applied for the possibility of replacing the resource content with the page about it being blocked by the server.

# Traffic Shaping

This service is designed to limit the external incoming traffic speed for network users.

---

<p class="callout info">[**Intrusion prevention**](https://docs.safedns.com/books/44-setup-traffic-rules/page/intrusion-prevention-system), [**Application control**](https://docs.safedns.com/books/44-setup-traffic-rules/page/application-control) rules, and **Traffic Shaping** do not handle traffic between local networks and branch networks.</p>

---

#### Setting up Traffic Shaping

To create the rule, go to **Traffic Rules -&gt; Traffic Shaping** and click on **Add**.

Next, fill in the following fields:

- **Title** – enter the rule name, for example, the **Accounting speed limit**. Maximum 40 characters.
- **Applies to** – select an individual user or group from the drop-down list.
- **Speed (Mbps)** – the speed limit for selected users.

There are two types of speed limits for ease of configuration. They can be applied for users, groups, IP addresses, or a special object **Quota Exceeded** (users who exceed traffic quota fall in this object).

- **Personal** – the speed will be limited for each of the selected users.
- **General** – the speed will be limited and shared among all the selected users.

For example, when selecting a personal speed limit, as in the screenshot below, the speed limit for each manager will be 1 Mbps.  
[![1. Speed Limit.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/1HFWZXShs8pcxuYQ-1-speed-limit.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/1HFWZXShs8pcxuYQ-1-speed-limit.png)

If the general speed limit is selected, as in the following example, the channel width for the entire accounting department will be 10 Mbps.  
[![2. Speed Limit.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/lKBSohPFneWgrG9t-2-speed-limit.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/lKBSohPFneWgrG9t-2-speed-limit.png)

<p class="callout info">When adding or editing a rule, in order to save and apply it, click on **Apply** above the rules list. The settings will be applied.  
Also, do not forget to move the slider in the upper part of the screen near **Traffic Shaping** to **Enabled** in order for the module to work.</p>

[![3. Speed Limit.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/c2AWygRIPaiP7VVl-3-speed-limit.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/c2AWygRIPaiP7VVl-3-speed-limit.png)

<p class="callout info">If you don't click on **Apply** button above the list of rules and leave the section **Traffic Shaping**, then the created rule will be saved, but will not be applied. To apply the rule, go back to the **Traffic Shaping** section and click on **Apply**.  
  
Also, saved but not applied rules will be lost in the following cases:  
- When restarting the server.  
- In case of switching to another node.  
- When the traffic shaping service is restarted or stopped (in cases when the service has failed or when a technical support employee is working with the service).</p>

You can enable and disable the rule, change its priority, and edit or delete it using the buttons in the **Operations** column.  
[![4. Speed Limit.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/I7QuoQh1LkBwjQ0D-4-speed-limit.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/I7QuoQh1LkBwjQ0D-4-speed-limit.png)

---

#### Order of Rule Application

Rules are applied from top to bottom in their order in the table until the first match. That is, if the user is in several groups simultaneously, the rule that is higher in the rules list applies to them.

---

#### Features

When users connect to SafeUTM from the internet via VPN, the traffic speed to the local network behind SafeUTM may be limited for them according to the Traffic Shaping rules for the end device in the local network.

When users log in from the local network via VPN the Traffic Shaping rules will not apply to them.

# Antivirus

---

For ease of administration, the optimal performance settings of the antivirus module and antivirus filtering settings are pre-configured in the product and do not require manual configuration. If necessary, the settings are optimized in SafeUTM version updates.  
[![1. Web Traffic Antiviruses.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/bjCKKrKXv6hLfon4-1-web-traffic-antiviruses.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/bjCKKrKXv6hLfon4-1-web-traffic-antiviruses.png)

The antivirus module is connected to a proxy server and a content filter, so it filters web traffic when the following conditions are met:

- The web resource is not in the proxy server's exclusion lists for its intended purpose.
- The user to whom the traffic is incoming is not included in the proxy server exceptions by source.
- The HTTPS site is checked only if the HTTPS traffic is decrypted by a content filter.

---

<details id="bkmrk-checking-antivirus-w"><summary>Checking Antivirus Work</summary>

You can try downloading test files from the site: [**https://www.eicar.org/?page\_id=3950**](https://www.eicar.org/?page_id=3950).

If configured correctly, the browser will display an access error.

</details>

# Intrusion Prevention System

Intrusion detection and prevention system

---

<p class="callout info">The intrusion detection and prevention system is only available in the **Enterprise edition of SafeUTM** for users with an active subscription to updates.  
**Intrusion prevention system, [Application control](https://docs.safedns.com/books/44-setup-traffic-rules/page/application-control)** rules, and [**Traffic shaping**](https://docs.safedns.com/books/44-setup-traffic-rules/page/traffic-shaping) do not handle traffic between local networks and branch networks.</p>

**The intrusion prevention system** (IDS/IPS, Intrusion detection system / Intrusion prevention system) is designed to detect, log and prevent malicious attacks on the server, integrated services (mail, website, etc.), and local network protected by an internet gateway.

Traffic blocking rules include blocking the activity of Trojans, spyware, botnets, p2p clients and **torrent trackers**, viruses, **TOR** network (used to bypass filtering rules), anonymizers, etc.

You can configure the service in **Traffic Rules -&gt; IPS.**

By moving the switch (to the left of the section name) to the left or to the right you can turn on/off the intrusion prevention service respectively.  
[![1. Intrusion Prevention.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/dtvZ4jWkepGypBju-1-intrusion-prevention.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/dtvZ4jWkepGypBju-1-intrusion-prevention.png)

In order to add a rule, click on **Add** and add local networks serviced by UTM in the field **Subnet**. As a rule, these are networks of local UTM interfaces, as well as networks of your enterprise’s local network’s remote segments routed to them.

<p class="callout warning">Under no circumstances should you specify networks belonging to external UTM network interfaces and external networks. The networks specified here participate in the rules of the intrusion prevention service as local ones characterizing traffic to/from local networks. Local inter-segment traffic is not excluded from the system checks.</p>

When using the intrusion prevention system, **it is not recommended** to use internal DNS servers for the network computers, as the system analyzes DNS queries passing through it and thus determines infected devices. In the case of using an internal AD domain, it is recommended to specify the SafeUTM DNS server on computers as the only DNS server, and specify the Forward zone for the local domain in DNS server settings.

---

#### Log

In the **Log** subsection, you can view the intrusion prevention system warning logs.  
[![2. Intrusion Prevention.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/q6h7l6x6f6KPKmsH-2-intrusion-prevention.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/q6h7l6x6f6KPKmsH-2-intrusion-prevention.png)

- **Analysis Result** field displays the system’s action, Blocked — the package is blocked, any other information in the field means Allowed, informing.
- In the field **Threat level** the following values can be displayed: 
    - 1 - <span style="background-color: #f8cac6;">critical</span>
    - 2 - <span style="background-color: #e8b052;">dangerous</span>
    - 3 – <span style="background-color: #fbeeb8;">warning</span>
    - 4 - not recognized
    - 255 - not classified

When you hover over the ID column in the line with the rule, the **Add to exception** button (+) will appear, clicking on which the signature will be added to the exclusions:  
[![3. Intrusion Prevention.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/OboY5evnvsnjt3gG-3-intrusion-prevention.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/OboY5evnvsnjt3gG-3-intrusion-prevention.png)

---

#### Rules

In the **Rules** tab, groups of rules of the intrusion prevention system are available to view and be enabled/disabled. When enabling/disabling a group of rules, the settings are applied instantly without the need to restart the service.

---

#### Exceptions

You can disable certain rules of the intrusion prevention system in case of false positives and for other reasons.  
[![4. Intrusion Prevention.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/4At1yFi7tAh9eoWO-4-intrusion-prevention.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/4At1yFi7tAh9eoWO-4-intrusion-prevention.png)

In the **Exceptions** tab, you can add the rule ID (its number, see log analysis example below).

Attention! Over time the rules IDs may change when databases are updated.

<details id="bkmrk-%21%21%21log-analysis-exam"><summary>Log Analysis Example</summary>

In the **Rules** tab, you can open the found group and find the triggered rules in it using its ID.

You can analyze the IP address with which a suspicious connection was attempted via **[whois](https://whois.domaintools.com/)**.

</details><details id="bkmrk-technical-requiremen"><summary>Technical Requirements</summary>

The intrusion prevention system requires significant computing resources to operate. Multicore (4 or more cores) processors are preferred. The minimum amount of RAM to use the system is 8Gb.

After turning on the system it is advisable to control that your processor power is sufficient to inspect traffic passing through the gateway.

</details>

# Objects

In the section **Traffic rules -&gt; Objects**, you can create objects to be used in the rules of firewall, content filter, application control, and routing.

---

Object types with examples are described in the table below:

---

#### Object Types

<table id="bkmrk-name-description-dat" style="width: 109.383%;"><tbody><tr><td style="width: 18.5414%;" width="208">**Name**

</td><td style="width: 51.1754%;" width="208">**Description**

</td><td style="width: 30.2832%;" width="208">**Data Example**

</td></tr><tr><td style="width: 18.5414%;" width="208">IP-address

</td><td style="width: 51.1754%;" width="208">IPv4 IP address.

</td><td style="width: 30.2832%;" width="208">10.0.0.1

</td></tr><tr><td style="width: 18.5414%;" width="208">IP Range

</td><td style="width: 51.1754%;" width="208">IP address range from the first to the last in the range.

</td><td style="width: 30.2832%;" width="208">10.0.0.1-10.0.0.25

</td></tr><tr><td style="width: 18.5414%;" width="208">Subnet

</td><td style="width: 51.1754%;" width="208">The logical block of IP addressing. The routing prefix is expressed in CIDR notation.

</td><td style="width: 30.2832%;" width="208">10.0.0.0/24

</td></tr><tr><td style="width: 18.5414%;" width="208">Domain

</td><td style="width: 51.1754%;" width="208">A symbolic name used to identify objects on the internet.

</td><td style="width: 30.2832%;" width="208">google.com

</td></tr><tr><td style="width: 18.5414%;" width="208">Port

</td><td style="width: 51.1754%;" width="208">Port number from 1 to 65535.

</td><td style="width: 30.2832%;" width="208">3389

</td></tr><tr><td style="width: 18.5414%;" width="208">Port Range

</td><td style="width: 51.1754%;" width="208">Port range from the first to the last in the range.

</td><td style="width: 30.2832%;" width="208">1024-65535

</td></tr><tr><td style="width: 18.5414%;" width="208">Time

</td><td style="width: 51.1754%;" width="208">Time Range

</td><td style="width: 30.2832%;" width="208">Mon 9 am – 6 pm

</td></tr><tr><td style="width: 18.5414%;" width="208">Addresses

</td><td style="width: 51.1754%;" width="208">A list of objects that may include an IP address, IP address range, subnet, and domain.

</td><td style="width: 30.2832%;" width="208">10.0.0.1, 10.0.0.4, 10.0.0.126

</td></tr><tr><td style="width: 18.5414%;" width="208">Port list

</td><td style="width: 51.1754%;" width="208">Port list.

</td><td style="width: 30.2832%;" width="208">25, 110, 143, 445, 465, 587, 993, 995

</td></tr><tr><td style="width: 18.5414%;" width="208">Schedule

</td><td style="width: 51.1754%;" width="208">List of time ranges

</td><td style="width: 30.2832%;" width="208">Mon 9am – 12pm; Tue 1pm – 6pm

</td></tr></tbody></table>

---

#### Creating Objects

To create an object, follow these steps:

1\. Go to **Traffic Rules -&gt; Objects** and click on (**+**) in the upper right corner of the screen.

2\. Select the type, name, and value of the object. Optionally, you can specify an arbitrary comment no longer than 128 characters  
[![1. Objects.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/N9luIfjtioQzEVfo-1-objects.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/N9luIfjtioQzEVfo-1-objects.png)

3\. Click on **Save**.

<p class="callout info">To create object groups, first, you need to create the objects.</p>

Objects like **IP address** and **Port** can be created directly when creating firewall rules by entering a required IP address or port in the corresponding fields.

# Quotas

In SafeUTM, it is possible to use traffic limits for users.

---

For each quota, you can define its validity period (hour, day, week, month, quarter). It can be assigned to users or groups in the user tree in a separate tab **Quota**. Also in this tab, you can increase and view available traffic for the current period of time and find out when the quota will be reset.

If the quota is assigned to a group, then by default it is assigned to all users of the group, as well as to nested groups. The quota inherited from the group can be changed in the priorities of the nested user or group.

<p class="callout info">If the quota is exceeded, users get into the object **Quota Exceeded**. **However, by default, no limits apply to such users.** This is why you need to create a restricting rule for the object **Quota Exceeded** in one or more SafeUTM modules (firewall, content filter, application control, speed limit).</p>

---

#### Setting up Quota

In order to set up the quota, follow these steps:

1\. Go to **Traffic Rules -&gt; Quotas** and click on **Add**.  
2\. Fill in the required fields in the quota addition form:

- **Title** – enter a custom quota name.
- **Limit (Mb)** – set a limit of megabytes of traffic for the selected period.
- **Limitation period** – select the validity period for which the quota will be allocated. 
    - Hour - each hour
    - Day - from 12:00 am to 11:59 pm
    - Week - from 12:00 am Monday to 11:59 pm Sunday
    - Month - from 12:00 am on the 1st day of the month to 11:59 pm on the last day of the month
    - Quarter - beginning of quarters: January 1, April 1, July 1, October 1
- Check that all the data have been entered correctly and click on **Save**.  
    [![1. Quotas.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/wTF4033ljKI1wXmd-1-quotas.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/wTF4033ljKI1wXmd-1-quotas.png)

You can manage the quota using the buttons in the **Operations** column. You can enable, disable, edit and delete the quota.  
[![2. Quotas.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/Y9q9QbgFMhgLNGTh-2-quotas.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/Y9q9QbgFMhgLNGTh-2-quotas.png)

---

#### Setting up User and Group

<details id="bkmrk-setting-up-group-the"><summary>Setting up Group</summary>

The created quotas can be applied for groups of users in the tab **Quota**.

You can inherit a quota from the higher-level group, or select another quota by deactivating **Inherit quota from group** switch and selecting the required quota.  
[![3. Quotas.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/Ykh20Oy8Xy08af1c-3-quotas.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/Ykh20Oy8Xy08af1c-3-quotas.png)

The group **All** has a separate switch **Use quotas**. This parameter allows you to extend the use of quotas to all users.  
[![4. Quotas.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/HKIJedbjRpAJUymh-4-quotas.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/HKIJedbjRpAJUymh-4-quotas.png)

</details><details id="bkmrk-setting-up-users-the"><summary>Setting up Users</summary>

The created quotas can be applied to users. You can manage quotas in the **Quota** tab of the selected user.  
[![5. Quotas.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/P411EQCmh4DbisXa-5-quotas.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/P411EQCmh4DbisXa-5-quotas.png)

In this tab, you can set up inheritance from the group to which the user belongs, or allocate a personal quota to them.

If the quota is allocated to a user, you can view the information about it, i.e. the validity period, available traffic, and the date of quota reset. Here you can also increase it by specifying the required number of megabytes and clicking on **Increase**.

! In order to delete a quota, you need to disable it for all users and groups. Otherwise, if you try to delete it, a window will appear prohibiting such action. The window can be seen in the screenshot below:  
[![6. Quotas.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/zSmXuvSwPTIWwRMr-6-quotas.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/zSmXuvSwPTIWwRMr-6-quotas.png)

</details>##### Example of Setting up Actions When Quota Is Exceeded

In the example below, we will consider a case when the users having exceeded the quota (those who have fallen into Quota Exceeded object) will be denied access to all social media and video hosting services along with the speed limited to 4 Mbps. However, one user will be allowed access even in case they exceed the quota, as the employee is a marketing specialist.

1. First, you need to create a quota with a limit of 2,000 Mb per day.
2. In all groups and all users in **Quota,** the tab turns the switch to the **Inherit quota from group** to the ‘enabled’ position. It needs to be done only if you changed the switch position because by default all groups and users are created with the switch in the ‘enabled’ position.
3. Assign the created quota to the group **All** (all other groups and users will inherit the assignment of this quota).
4. Create a rule in the [**content filter**](https://docs.safedns.com/books/44-setup-traffic-rules/page/content-filter) to restrict access to social networks and video hosting services for users who have exceeded the quota.
5. Create a rule that allows one of the users' access to social networks even if they have exceeded the quota.
6. Create a rule that [**limits the speed**](https://docs.safedns.com/books/44-setup-traffic-rules/page/traffic-shaping) for all users that is in the object **Quota Exceeded** down to 4 Mbps.