FRITZ!Box 4040 Service - Knowledge Base

FRITZ!Box 4040 Service

Restricting Internet access using parental controls

You can set up different access profiles in the FRITZ!Box and define the following for each of them in detail:

  • how long and when Internet use is allowed on individual days of the week.
  • which websites are blocked or which are the only ones that can be accessed.
  • which network applications (for example online games) are blocked from accessing the Internet.

You can assign each access profile to one or more network devices in the FRITZ!Box home network. This way you can ensure that all devices used by a particular person, such as computers, smartphones, and game consoles, have the same limitations and are subject to the same budget.

Requirements / Restrictions

  • The parental controls function is not available if the FRITZ!Box shares the Internet connection of another router ("Internet router as IP client"). In this case, regulate Internet access in the other router.
  • As a rule, devices in the guest network (private hotspot) are assigned to the "Guest" access profile and cannot be regulated on an individual basis.

1 Preparations

Creating filter lists

If you would like to prevent certain websites from being displayed (blacklist) or only want to allow users to access certain websites (whitelist), enter the addresses (URLs) in the respective filter list:

  1. Click "Internet" in the FRITZ!Box user interface.
  2. Click "Filters" in the "Internet" menu.
  3. Click on the "Lists" tab.
  4. Click on the "Edit" link next to the list you would like to edit.

    Important:If you enabled the filter for websites for a specific access profile, as a rule direct IP access to websites is blocked for members of that profile. You can check the list of "Permitted IP addresses" to see which IP addresses the FRITZ!Box prevented from being called up and release them if you would like.

  5. Enter the Internet addresses (URLs) or IP addresses in the field (no more than 500 entries per list). Press the space bar after entering each address.

    Example:
    poker.com xxx.com aggro.tv

  6. Click "OK" to save the list.

Configuring network applications

If you would like to block certain network applications (such as online games) from accessing the Internet, you must first configure this in the FRITZ!Box:

Important:You can only block network applications that exclusively use the TCP and UDP protocols.

2 Setting up an access profile

General access profiles are preconfigured in the FRITZ!Box. All devices in the home network that have not been assigned to a specific profile are automatically assigned to the "Standard" access profile. The access profile "Guest" applies to all devices in the guest network.

If you would like to regulate Internet access for particular users or user groups on an individual basis, set up a separate access profile for each of them:

  1. Click "Internet" in the FRITZ!Box user interface.
  2. Click "Filters" in the "Internet" menu.
  3. Click on the "Access Profiles" tab and then the "New access profile" button.
  4. In the "Name" field, enter the name of the user or user group you would like to regulate Internet access for.
  5. Define when Internet use should be allowed in the "Period" window.
  6. Define how long members of this profile are allowed to use the Internet on each day of the week in the "Time Budget" window.

    Note:Tickets can be used to extend online time by 45 minutes per ticket. Tickets are displayed under "Internet > Filters > Access Profiles" in the user interface. A ticket is redeemed in the browser on the page notifying users that their online time has been exhausted.

  7. Enable the option "shared budget" if all of the devices belonging to this access profile should share the maximum Internet usage time.

    Important:A shared budget only makes sense with access profiles for individual users who access the Internet with more than one network device. This option should not be enabled for user groups.

  8. Enable the option "Filter web sites" if you would like to prevent certain websites or unknown sites from being accessed.
    1. Enable the option "Allow HTTPS queries" if you want to allow encrypted Internet access.

      ATTENTION!If you enable this option, HTTPS websites are displayed as a rule, even if their URLs are on the blacklist or are not on the whitelist!

    2. Select the filter you would like to use for Internet access:
      • Select "Permit web sites (whitelist)" if only permitted websites should be accessible,
        • or
      • Select "Block web sites (blacklist)" if only certain websites should be blocked.

        Note:If you also enable the option "Block web sites with adult content", all web pages the Bundesprüfstelle für jugendgefährdende Medien (BPjM, Federal Department for Media Harmful to Young Persons) in Germany has added to its official list are blocked. This option is only available if you select Germany as the country of use under "System > Region and Language".

  9. Select which network applications you would like to block for this access profile from the drop-down list "Block network application".
  10. Click "OK" to save the access profile.

3 Assigning an access profile

You can assign access profiles to all devices that were connected to the FRITZ!Box home network at least once. If the FRITZ!Box Child Protection software is installed on the Windows computers in your home network, you can also assign access profiles to all Windows user accounts:

Important:In the computer management, assign restricted user rights to all Windows user accounts whose Internet access you would like to regulate.

  1. Click "Internet" in the FRITZ!Box user interface.
  2. Click "Filters" in the "Internet" menu.
  3. Select the desired access profile for the device or Windows user from the drop-down list.

    Example:
    You created the access profile "Max" for your son. Max uses the FRITZ!Box's Internet connection with his smartphone, his game console and with the Windows user account "Max Mustermann" on the family's computer. In order to ensure that Max's budget includes Internet access from all of these, assign both of the devices and the user account to the access profile "Max".

  4. Click "Apply" to save the settings.

4 Implementing additional security measures

Adjusting the "Standard" access profile

Deny Internet access to members of the "standard" access profile to ensure that parental controls cannot be bypassed:

Note:All devices in the FRITZ!Box home network that have not been assigned to a specific profile are automatically assigned to the "Standard" access profile.

  1. Click "Internet" in the FRITZ!Box user interface.
  2. Click "Filters" in the "Internet" menu.
  3. Click on the "Access Profiles" tab and then the (edit) button for the "Standard" profile.
  4. Enable the option "never" in the "Time Limit" section.
  5. Enable the option "Use of guest access blocked".
  6. Click "OK" to save the access profile.

Setting up password protection for FRITZ!Box

The FRITZ!Box is already password protected in the factory settings. If you disabled the FRITZ!Box's password protection, enable it again:

  1. Click "System" in the FRITZ!Box user interface.
  2. Click "FRITZ!Box Users" in the "System" menu.
  3. Click on the "Login to the Home Network" tab.
  4. Enable the option "Login with FRITZ!Box user name and password",
    • or, if you have not set up any users yet:
      • Enable the option "Login with the FRITZ!Box password" and enter a password of your choice that will be required to access the FRITZ!Box user interface.
  5. Click "Apply" to save the settings.