Setting Access Exception Rules for Web Access
You can set up to 200 exception rules for users and members of a group to allow access to
applications, file extensions and protocols, Web categories, and URLs that you have blocked
for all other users, or the other way around, to block access to applications, file extensions
and protocols, Web categories, and URLs that you have allowed access to for all other users.
If you have not created a custom group, an exception rule can apply to either one of the
following groups or individual users:
•
All users
•
All authenticated users
•
All unauthenticated users
•
A local group or local user
•
A group or users that is defined by its IP address
•
A Lightweight Directory Access Protocol (LDAP) group or LDAP user
•
A RADIUS VLAN group
To further refine exception rules, you can create custom groups that allow you to include a
combination of local groups and local users, groups and users that are defined by their IP
address, LDAP groups and users, and RADIUS groups and users. For more information, see
Creating Custom Groups for Web Access Exceptions
Note:
Users and groups to which access exception rules apply are not the
same as LAN groups. For information about how to specify
members of a LAN group and to customize LAN group names, see
Managing Users, Groups, and Authentication
If you have not created a custom category, an exception rule can apply to either one of the
following components:
•
One built-in application group or built-in individual application
•
A combination of files extensions and protocols
•
One URL or URL expression
•
One built-in Web category group or built-in individual Web category
To further refine exception rules, you can create custom categories that allow you to include
either a selection of applications, or a selection of URLs, or a selection of Web categories.
For more information, see
page 142.
Tip:
If you want to use a custom group and custom category, first create the
custom group and custom category, then create the exception rule.
132 |
Chapter 4. Content Filtering and Optimizing Scans
ProSecure Web/Email Security Threat Management (STM) Appliance
Creating Custom Categories for Web Access Exceptions
on page 139.
on page 147.
on