Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Internet Access Policies > Enforcement order > Prioritizing group and domain policies
Prioritizing group and domain policies
Web Security Help | Web Security Solutions | Version 7.8.x
In some cases, organizations may prefer that directory policies (applied to users, groups, and domains) take precedence over policies applied to IP addresses (computers and networks).
This might occur, for example, if group-based policies are used widely in the organization, and the Account Override option (see Account override) is applied to IP addresses in the network. When the default enforcement order is used, the IP address-based policy overrides any group-based policies, which could cause account override to fail frequently. When group and domain policies take precedence, the problem is avoided.
You can configure Websense Filtering Service to prioritize directory policies (in other words, use the search order User > Group > Domain > Computer > Network to identify the policy to apply to a request).
When Filtering Service is installed on a Windows or Linux server:
1.
Navigate to the Websense bin directory on the Filtering Service machine (C:\Program Files or Program Files (x86)\Websense\Web Security\bin or /opt/Websense/bin/, by default).
2.
Open the eimserver.ini file in a text editor.
3.
Locate the [FilteringManager] section of the file, and add the following parameter:
UserGroupIpPrecedence=true
4.
5.
*
Windows: Use the Windows Services tool to restart Websense Filtering Service.
*
Linux: Use the /opt/Websense/WebsenseDaemonControl command to restart Filtering Service.
When Filtering Service is on a Websense appliance:
1.
2.
Navigate to the Administration > Toolbox page.
3.
4.
Select Websense Web Security from the Module drop-down list.
5.
Enter user-group-ip-precedence in the Command field.
6.
Enter enable in the Action field, then click Run.
Filtering Service is stopped and restarted automatically to implement the change.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Internet Access Policies > Enforcement order > Prioritizing group and domain policies
Copyright 2016 Forcepoint LLC. All rights reserved.