How do I create exceptions and how do they work?

Topic 50516 | Web Security FAQ | Websense Web Security Solutions | Updated 07-Feb-2014


Applies To:	Websense Web Filter, Web Security, Web Security Gateway, and Web Security Gateway Anywhere, v7.7 and 7.8

Exceptions override Web Security policies to permit or block access to specific URLs for specific clients. Use an exception to:

Permit access for all employees to a specific URL that would otherwise be blocked based on its category.

Block all clients in a specific role from a suspicious uncategorized URL while the site is investigated.

Permit temporary access to a URL for certain members of a group while continuing to block the site for the rest of the group.

Exceptions allow a flexible and rapid response to user requests, changes in company policies, spikes in Internet activity, or other changes in circumstance.


	Note This feature replaces the Unfiltered URLs list, and removes the need to use custom categories to create blacklists. (On upgrade to v7.7 or v7.8, all existing unfiltered URLs are automatically recreated as permitted exceptions.)

Use the Policy Management > Exceptions page to add, review, edit, or delete exceptions. The page shows the following information for each exception:

The Name given to the exception when it was created.

The URL or regular expression permitted or blocked by the exception, or a link to the complete list of URLs or expressions (if the exception includes more than one).

The name of the Client, if the exception applies to one client, or: the role name (if the exception applies to an entire delegated administration role), Global (if all clients are affected), or a link to a complete list of affected clients.

The exception Type: an icon indicating whether URLs in the exception are blocked, permitted, or permitted with security override disabled.

The date the exception was Last Modified.

When the exception Expires: either an expiration date, or Never.

Whether the exception is Active (used to block or permit requests) or Inactive (either expired, or just not currently in use).

Click Add below the list to create an exception.

Click the link that is the name of the exception or mark the check box next to an exception and click Edit to edit an existing exception.

See the Web Security Help (verstion 7.7 or version 7.8) for instructions for creating exceptions.

For instructions on creating a specific type of exception, see "Exception shortcuts" in the Web Security Help (verstion 7.7 or version 7.8).

If multiple exceptions could apply to a request, how is the right one selected?

To apply exceptions, Filtering Service uses the following rules:

By default, Super Administrator exceptions take precedence over exceptions created by delegated administrators.

A delegated administrator exception takes precedence when the Super Administrator exception has been defined to allow delegated administrator override.