Allied Telesis AR Series Technical Manual page 41

Configuring Web Control
Figure 8: Web Control for more than one entity
Example 3 The following shows how to configure two firewall entities, with a different default action being
applied for each entity.
Access from the research network entity (within marketing zone) to URLs matching the art and
sports categories are permitted, whilst access to any other URLs is denied.
Conversely, access from the payroll network entity (within the admin zone) to URLs matching the
banned category are denied, whilst access to any other URLs is permitted.
Step 1:
awplus#configure terminal
awplus(config)#zone admin
awplus(config-zone)#network payroll
awplus(config-network)#ip subnet
Step 2:
awplus(config-host)#zone marketing
awplus(config-zone)#network research
awplus(config-network)#ip subnet 192.168.2.0/24
Step 3:
awplus(config-host)#web-control
awplus(config-web-control)#provider digitalarts
Step 4:
awplus(config-control)#category banned
C613-22104-00 REV B
category banned
blocked
Internet net
Create the admin zone entity containing the payroll network entity and assign
its IP subnet address.
Create the marketing zone entity containing the research network entity and
assign its ip subnet address.
Enter into Web Control configuration mode and set the website categorization
provider.
Configure custom categories and associated match criteria.
H o s
t
H o s
t
X X X
category art
permitted
category sports
permitted
other sites
blocked
192.168.1.0/24
How to Configure Web Control Default Action Per-entity
Advanced Network Protection
H o s
t
H o s
t
X X
|
Page 41