# Protocol Selection

The web-filtering feature on select security devices enables you to manage Internet access and prevent access to inappropriate web content.

Warning: Note that this feature is CPU intensive and under certain high traffic volume conditions can cause high CPU utilization.

Select one of the following web-filtering solutions, then click Apply to save the configuration:

Integrated (SurfControl) : The security device intercepts each HTTP request, then determines the category of the URL by checking its local database or sending the request to a SurfControl server for categorization. The device then matches the category to the firewall policy profile and blocks or permits access, depending on the profile settings.

You must install a web-filtering license key to activate this feature.

Redirect (SurfControl): The security device sends the first HTTP request in a TCP connection to a SurfControl server, enabling you to block or permit access to different sites based on their URLs, domain names, and IP addresses.

Redirect (Websense): The security device sends the first HTTP request in a TCP connection to a Websense server, enabling you to block or permit access to different sites based on their URLs, domain names, and IP addresses.