Technical Library | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Web Security Frequently Asked Questions : How is a policy assigned to a request?
How is a policy assigned to a request?
Topic 50511 | Web Security FAQ | Websense Web Security Solutions | Updated 07-Feb-2014
Applies To:
Websense Web Filter, Web Security, Web Security Gateway, and Web Security Gateway Anywhere, v7.7 and 7.8
Web Security policies are used to determine whether a user request is permitted or blocked.
Policies can be applied to directory clients (user, group, or domain/OU) or computer and network clients (individual IP addresses or IP address ranges). It is therefore possible to have a policy for all of the following:
*
The user making the request
*
The group or groups to which the user is assigned
*
The IP address from which the request originates
When multiple policies could be applied, by default, Websense software determines which one is the best fit based on the following order of precedence:
User > Computer > Network > Group > Domain/OU
Alternatively, you can configure Websense software to use the following precedence order:
User > Group > Domain > Computer > Network
For more information about configuring the precedence order, see Prioritizing group and domain policies.
If a user belongs to multiple groups, and there are no higher-precedence policies that could be applied, all of the policies assigned to the user's groups are considered.
*
If all groups have the same policy, that policy is used.
*
If there are different policies for the groups, the policy is determined according to the Use most restrictive group policy option, set on the Settings > General > Filtering page in the Web Security manager.
*
If the option is selected, the request is blocked if any of the applicable policies blocks the URL category.
*
If the option is not selected, the request is permitted if any of the applicable policies permits the URL category.
If the most applicable policy does not include a category filter or limited access filter that covers the time when the request was made, Websense software searches for the next most applicable policy that includes a filter for that time.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Web Security Frequently Asked Questions : How is a policy assigned to a request?
Copyright 2016 Forcepoint LLC. All rights reserved.