Create policies and filters

Web Security Help | Web Security Solutions | Version 7.8.x

Related topics:

Performing delegated administrator tasks

View your user account

Add clients to the Clients page

When your role was created, it automatically inherited the current Default category filter and protocol filter from the Super Administrator role. A role-specific Default policy was created that enforces the inherited Default category and protocol filters. (This role-specific Default policy is automatically applied to any client added to the role until another policy is assigned.)

The Super Administrator may have copied other policies and filters to your role, as well.

In addition to policies and filters, you also inherit any custom file types and protocols created by the Super Administrator.

You can edit inherited policies and filters. Changes you make affect your role only. Any changes the Super Administrator later makes to the original policies and filters do not affect your role.


	Note Changes the Super Administrator makes to file types and protocols automatically affect the filters and policies in your role. When a Super Administrator informs you of changes to these components, review your filters and policies to be sure they are handled appropriately.

You can also create as many new filters and policies as you need. Filters and policies created by a delegated administrator are available only to administrators logged on to your role. For instructions on creating policies, see Working with policies. For instructions on creating filters, see Working with filters.

You can edit filter components for your role, with some limitations.

Categories: Add or edit custom categories; assign custom URLs and keywords to custom or Master Database categories; change the action applied by default in category filters. (Changes to a category's default action are implemented only if the category is not locked by the Filter Lock.)

Protocols: Change the action applied by default in protocol filters in your role. (Changes to a protocol's default action are implemented only if the protocol is not locked by the Filter Lock.) Delegated administrators cannot add or delete protocol definitions.

File types: View the file extensions assigned to each file type. Delegated administrators cannot add file types or change the extensions assigned to a file type.

For more information, see Building filter components.

If a Super Administrator has implemented Filter Lock restrictions, there may be categories or protocols that are automatically blocked, and cannot be changed in the filters you create and edit.