Web Lists Tab - McAfee SG310 Administration Manual

Firewall menu options
Access control
From the Firewall menu, click Definitions > Addresses tab. The Addresses page appears.
1
Select Single Address or Range and click New.
2
Enter 10.0.0.0-127 as the range of addresses to block in the IP Address field and click Finish. Notice
3
the field automatically converted the address range from 10.0.0.0-127 to 10.0.0.0/25. The latter CIDR
format (Classless Inter-Domain Routing) is a simpler format for the network stack and rules to understand
and also the more modern way of expressing ranges that end nicely on 2
Web console recognizes them and performs a conversion automatically where appropriate.
Enter 10.0.0.15 as the single address to allow in the IP Address field and click Finish.
4
From the Firewall menu, click Access control > ACL tab. The Access Control (Black and White) Lists
5
page appears.
In the Allowed Source Hosts list, select the single address you defined, which is 10.0.0.15. You can
6
also provide a name for the address, but this example just uses the IP addresses without names.
In the Blocked Source Hosts list, select the single address you defined, which is 10.0.0.0/25.
7
Click Submit.
8

Web Lists tab

Use the tabs within Web Lists to configure allowed and blocked URL fragments. Only WWW browsing is
restricted by these settings. If a requested URL matches contains any of the defined URL fragments
defined, the rule is triggered. You can grant or deny access to any Web address (URL) that contains text or
a complete URL defined under the URL Block or Allow lists. Entering xxx blocks access to any URL
containing xxx; for example, all of the following URLs are blocked: http://www.xxx.com,
http://xxx.example.com, or www.test.com/xxx/index.html.
Tip: Defining overly short URL fragments can result in many sites matching and being allowed or denied
erroneously. For better accuracy, define complete URLs. However, hundreds or even thousands of reasonable
length fragments can be defined and incur only a slight time cost for filtering.
Adding an allowed URL
From the Firewall menu, click Access control > Web Lists tab > URL Allow tab. The URL Allow List
1
page appears (Figure
Figure 213 URL Allow tab
Enter a complete URL or a character string in the New Web URL field.
2
Maximum characters: 500
Click Add. The URL is added to the Web URL list of allowed URLs. Repeat as necessary.
3
Deleting an allowed URL or URL fragment
Use this procedure to delete an allowed URL or URL fragment.
McAfee UTM Firewall 4.0.4 Administration Guide
213).
n boundaries, so the UTM Firewall
211