Editing a policy

Administrator Help | Forcepoint Web Security and Forcepoint URL Filtering | v8.5.x

Related topics:

Web Protection Policies

Working with policies

Creating a policy

Working with filters

Restricting users to a defined list of URLs

Use the Policy Management > Policies > Edit Policy page to make changes to an existing policy, or to finish defining a new policy.

Use the top portion of the page to edit the policy name and description:

Click Rename to change the policy name.

Simply type in the Description field to change the filter description.

Under the policy description, the Clients field lists how many clients of each type (directory, computer, and network) are currently filtered by this policy. To see which clients are governed by the policy, click the link corresponding to the appropriate client type.

To assign this policy to additional clients, click Apply to Clients in the toolbar at the top of the page, and then see Assigning a policy to clients.

Use the Policy Definition area to define which filters this policy applies at different times:

To add a time block to the schedule, click Add.

Use the Start and End columns in the Schedule table to define the time period that this time block covers.

To define filters for a period that spans midnight (for example, 5 p.m. to 8 a.m.), add two time blocks to the schedule: one that covers the period from the start time until midnight, and one that covers the period from midnight to the end time.

The Example - Standard User policy demonstrates how to define a time period that spans midnight.

Use the Days column to define which days of the week are included in this time block. To select days from a list, click the down arrow in the right portion of the column. When you are finished selecting days, click the up arrow.

Use the Category / Limited Access Filter column to select a filter to enforce during this time block.

To add a new filter to enforce in this policy, select Add Category Filter or Add Limited Access Filter. See Creating a category filter or Creating a limited access filter for instructions.

Use the Protocol Filter column to select a protocol filter to enforce during this time block.

To add a new filter to enforce in this policy, select Add Protocol Filter. See Creating a protocol filter for instructions.

Use the Cloud App Filter column to select a cloud app filter to enforce during this time block.

To add a new filter to enforce in this policy, select Add Cloud App Filter. See Creating a cloud app filter for instructions.

Repeat steps 1 through 6 to add additional time blocks to the schedule.

When any time block in the schedule is selected, the details provided in the tabs in the bottom portion of the Edit Policies page shows the filters enforced during that time block. The tabs are designed to match the edit filter pages available from Main > Policy Management > Filters.

Filter details include:

The filter type (category filter, limited access filter, protocol filter, or cloud app filter) in the tab heading.

The filter name and description.

The filter contents.

Category filter:

The filter description.

The filter contents (category names with actions to be applied).

Use the search option provided to find a specific category in the list. Note, however, that the search option is not available if either the Permit All or Block All filter is selected.

The number of policies that enforce the same filter.

A section to the right to edit the category filter by changing the action assigned to a category, or adding advanced filtering options to selected categories.

Limited access filter:

The filter description.

A list box containing the sites previously added to the filter.

Use the Add Sites and Add Expressions button to add permitted URLs, IP addresses, or regular expressions to the filter.

To remove a site from the filter, mark the check box next to the URL, IP address, or expression, and then click Delete.

The number of policies that use the same filter.

Protocol filter:

The filter description.

The filter contents (protocol names with actions to be applied).

Use the search option provided to find a specific protocol in the list. Note, however, that the search option is not available if either the Permit All or Block All filter is selected.

The number of policies that enforce the same filter.

A section to the right to edit the filter by changing the action assigned to a protocol, or adding advanced filtering options to selected protocols.

Cloud app filter:

The filter description.

The filter contents (Block all high risk apps checkbox and blocked and permitted apps lists).

Enable or disable the checkbox and use the search options provided to find a specific cloud app for inclusion in either list.

The number of policies that enforce the same filter.

When you edit a filter on this page, the changes affect every policy that enforces the filter. Before editing a filter that is enforced by multiple policies, click the This filter is active in link to see exactly which policies will be affected.

Note that the filter names and descriptions cannot be changed from the Edit Policies page. Those options are available only by accessing the filter directly from the Main > Policy Management > Filters page.

When you finish editing a policy, click OK to cache your changes. Changes are not implemented until you click Save and Deploy.