Content filter keeps base computers secure

  • Published
  • By Nick DeCicco
  • 60th Air Mobility Wing Public Affairs
TRAVIS AIR FORCE BASE, Calif. --  Many who have operated a computer at Travis have encountered the base's informational electric fence when it comes to Web browsing.

It's a familiar, yet understandable story. For example: Try to visit YouTube to show a friend that funny clip of Sarah Silverman and Matt Damon from "Jimmy Kimmel Live!" and prepare to face the fence's favorite three words in all-capitalized, stop-sign red:

Content filter denied.
It's not just YouTube.
Want to visit your friend's blog to see today's rant? Impossible.
Want to check your personal e-mail account? No way.
Want to log onto MySpace and read new comments? Fat chance.

All Air Force bases have some sort of content filter for browsing the Web. The reasons are many, but the basis is primarily for security purposes as well as the added bonus of keeping Airmen and civilians on task at work.

But who decides what is and isn't blocked?

The government has a contract in place with a third-party vendor, Blue Coat Systems, a maker of proxy server appliances that, among other things, categorizes Web sites. A proxy server intercepts a user's requests to access the real server and aims to resolve the request itself.

Based on Blue Coat's list, Air Mobility Command determines which categories are acceptable. Travis' Boundary Protection office is tasked with putting AMC's orders into effect.

"We don't want to block anything we don't have to," said Staff Sgt. Joshua Liebold, 60th Communications Squadron, NCOIC of boundary protection.

Streaming video, streaming audio, social networking, adult entertainment, personal Web sites, Web hosting, hacking, malicious logic, alcohol, drugs and tobacco are among the types of content AMC deemed out of bounds.

"Basic stuff that's needed for official business would be unblocked," said Senior Airman Daniel Shopp, a boundary protection specialist.

The work their office does is essential to the Air Force's mission, particularly against cyber attacks, Airman Shopp said.

"We block Web sites that people can get to that have malicious content," he said. "We block file extensions that are on legitimate sites. If you tried to download an executable file, it's going to get blocked. Just because that Web site's a legitimate Web site doesn't mean it hasn't been hijacked and the content hasn't been placed on there."

Sometimes, Web sites fall under multiple categories. A government site that features a short film clip may be blocked because of the video content despite being approved, for example.

For miscategorized sites such as this or uncategorized ones, a user can fill out a Project Workflow Requirements Resource Request to allow access. A link to the form appears on the same page as the access denial screen. If the request is approved, it should take a few days for access to be allowed, said Sergeant Liebold.

This also means blocking can be user specific, he added. The band, for example, has access to music sites others on base do not.

"If we have to, we can wrench it down so one person can only get to certain sites," he said.

While access inside Travis' walls may be restricted, once Airmen and civilians leave base, this no longer applies. Sergeant Liebold and Airman Shopp urged members and civilians to be cautious with information on personal or social networking Web sites such as MySpace or Facebook after they leave work, too.

"It's good to have pride in the military and what you do," Sergeant Liebold said. "It's just that you've got to be smart about what you show."

For more information, call the 60th CS Help Desk at 424-2666.