Editing a policy

Web Security Help | Web Security Solutions | Version 7.8.x

Related topics:

Internet Access Policies

Working with policies

Creating a policy

Working with filters

Restricting users to a defined list of URLs

Use the Policy Management > Policies > Edit Policy page to make changes to an existing policy, or to finish defining a new policy.

Use the top portion of the page to edit the policy name and description:

Click Rename to change the policy name.

Simply type in the Description field to change the filter description.

Under the policy description, the Clients field lists how many clients of each type (directory, computer, and network) are currently filtered by this policy. To see which clients are governed by the policy, click the link corresponding to the appropriate client type.

To assign this policy to additional clients, click Apply to Clients in the toolbar at the top of the page, and then see Assigning a policy to clients.

Use the Policy Definition area to define which filters this policy applies at different times:

To add a time block to the schedule, click Add.

Use the Start and End columns in the Schedule table to define the time period that this time block covers.

To define filters for a period that spans midnight (for example, 5 p.m. to 8 a.m.), add two time blocks to the schedule: one that covers the period from the start time until midnight, and one that covers the period from midnight to the end time.

The Example - Standard User policy demonstrates how to define a time period that spans midnight.

Use the Days column to define which days of the week are included in this time block. To select days from a list, click the down arrow in the right portion of the column. When you are finished selecting days, click the up arrow.

Use the Category / Limited Access Filter column to select a filter to enforce during this time block.

To add a new filter to enforce in this policy, select Create category filter or Create limited access filter. See Creating a category filter or Creating a limited access filter for instructions.

Use the Protocol Filter column to select a protocol filter to enforce during this time block.

To add a new filter to enforce in this policy, select Create protocol filter. See Creating a protocol filter for instructions.

Repeat steps 1 through 5 to add additional time blocks to the schedule.

When any time block in the schedule is selected, the bottom portion of the Edit Policies page shows the filters enforced during that time block. Each filter listing includes:

The filter type (category filter, limited access filter, or protocol filter)

The filter name and description

The filter contents (categories or protocols with actions applied, or a list of sites permitted)

The number of policies that enforce the selected filter

Buttons that can be used to edit the filter

When you edit a filter on this page, the changes affect every policy that enforces the filter. Before editing a filter that is enforced by multiple policies, click the Number of policies using this filter link to see exactly which policies will be affected.

The buttons that appear at the bottom of the filter listing depend on the filter type:

Filter Type

Buttons

category filter

Use the Permit, Block, Confirm, or Quota button to change the action applied to the selected categories (see Actions).

To change the action applied to a parent category and all of its subcategories, first change the action applied to the parent category, and then click Apply to Subcategories.

To enable keyword blocking, file type blocking, or blocking based on bandwidth, click Advanced.

limited access filter

Use the Add Sites and Add Expressions button to add permitted URLs, IP addresses, or regular expressions to the filter (see Restricting users to a defined list of URLs).

To remove a site from the filter, mark the check box next to the URL, IP address, or expression, and then click Delete.

protocol filter

Use the Permit or Block button to change the action applied to the selected protocols (see Actions).

To change the action applied to all protocols in a protocol group, change the action applied to any protocol in the group, and then click Apply to Group.

To log data for the selected protocol, or to enable blocking based on bandwidth, click Advanced.

When you finish editing a policy, click OK to cache your changes. Changes are not implemented until you click Save and Deploy.