Policy Enforcement - McAfee SG310 Administration Manual

Firewall menu options
Access control
From the Firewall menu, click Access control > Web Lists tab > URL Allow tab. The URL Allow List
1
page appears.
Click the delete icon for the URL or fragment you want to delete. An action successful message is
2
displayed.
Blocking a URL
From the Firewall menu, click Access control > Web Lists tab > URL Block tab. The URL Block List
1
page appears
Figure 214 URL Block
Enter the URL or fragment in the New Web URL field.
2
Click Add. The URL is added to the Web URL list of blocked URLs. Repeat as necessary.
3
Deleting a blocked Web URL
Use this procedure to delete or unblock a blocked URL.
From the Firewall menu, click Access control > Web Lists tab > URL Block tab. The URL Block List
1
page appears.
Click the delete icon for the URL you want to unblock. An action successful message is displayed. The URL
2
is allowed access again.

Policy enforcement

Policy enforcement on the UTM Firewall appliance provides the ability for specific internal servers and
workstations to have their network access through the appliance denied based on the results of probes
performed periodically by the appliance. The built-in functionality allows network access to be denied,
including internet and VPN access, based on the TCP services a server or workstation is running.
The SG565, SG580, SG640, and SG720 models have the ability to enforce a security policy based on the
results of a NASL (Nessus Attack Scripting Language) script. NASL is the scripting language similar to the C
programming language used by the Nessus vulnerability network scanner to perform its vulnerability tests.
To download NASL scripts, go to http://cgi.nessus.org/plugins/. You can also write your own scripts. A
NASL reference guide is available at
This section contains the following topics:
• Enabling security policy enforcement
• Creating a security policy group
• Uploading a NASL script
• Managing policy enforcement scripts
212 McAfee UTM Firewall 4.0.4 Administration Guide
(Figure 214).
http://www.virtualblueness.net/nasl.html.