Lesson 4: The Default policy

New User Quick Start | Web Security Solutions | Version 7.7.x


Learn about the policy that serves as a filtering safety net, governing Internet access for any user to whom no other policy applies.

Websense Web security solutions use policies to determine how and when Internet requests are filtered for users, groups, computers, and networks. Each policy includes information about which Web sites and Internet communication protocols are blocked or permitted, and the days and times to enforce those rules.

Your Websense software includes a Default policy, in effect 24 hours a day, 7 days a week. Initially, this policy monitors Internet traffic without blocking. When you first install your Websense software, the Default policy applies to everyone on the network.


	Note If your organization uses delegated administration, each role has its own Default policy. A role's Default policy is enforced for any clients in the role who do not have another policy assigned to them.

Exercise: Become familiar with the Default policy:

In TRITON - Web Security, select the Main tab of the left navigation pane, then select Policies, under Policy Management.

A list of existing policies appears.

Click Default to view policy details on the Edit Policy page.

Examine the area at the top of the content pane.

The policy name appears, followed by a short description of what the policy is intended to do.

A summary of the clients specifically governed by this policy is shown. Note that even if no clients are listed here, the Default policy applies to any client not currently governed by another policy.

Examine the Schedule box.

After a new installation, the Start, End, and Days columns show that the Default policy is in effect 24 hours a day, 7 days a week.

The Category / Limited Access Filter column shows that Monitor Only category filtering is in effect.

A category filter is a list of categories and the actions (such as Permit or Block) assigned to them. The category filter enforced by a policy determines how user requests for Web sites are treated.

The alternative to a category filter is a limited access filter, a list of specific URLs that users can access. When a limited access filter is enforced by a policy, users governed by the policy can access only sites on the list.

The Protocol Filter column shows that Monitor Only protocol filtering is in effect.

A protocol filter is a list of protocols (usually non-HTTP protocols) and the actions (such as Permit or Block) assigned to them. When Network Agent is installed, the protocol filter enforced by a policy determines how user attempts to access specific protocols (such as those used for instant messaging or peer-to-peer file sharing) are treated.

Two columns appear beneath the policy schedule. Examine the Category Filter column.

The name of the current category filter appears next to the column description.

You can scroll through the list to see which categories are permitted and blocked. A legend at the bottom of the page explains the icons that appear next to each category.

You will learn how to create and edit category filters in a later lesson.

In the lessons that follow, you will learn how to work with policies and their building blocks. You can then use what you learn to edit the Default policy to best suit the needs of your organization.

Continue with Lesson 5: Working with clients.