Technical Library | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Exceptions to Policies > Managing exceptions > If multiple exceptions could apply, which takes precedence?
If multiple exceptions could apply, which takes precedence?
Web Security Help | Web Security Solutions | Version 7.8.x
By default, Super Administrator exceptions take precedence over exceptions created by delegated administrators. So if a Super Administrator exception blocks a URL, and a delegated administrator exception permits the same URL, the request is blocked.
If, however, the Super Administrator configures an exception to allow delegated administrator overrides (see Overriding an exception), then the delegated administrator exception takes precedence. So if a Super Administrator exception blocks a URL, and a delegated administrator exception permits the same URL, the request is permitted.
If multiple equivalent exceptions could apply to a request (for example, if multiple Super Administrator exceptions include the same URL):
*
Filtering Service checks for blocked exceptions first, so if there is a blocked exception and a permitted exception, the request is blocked.
*
If there are multiple blocked exceptions, the first one found is applied.
*
If there are no blocked exceptions and multiple permitted exceptions, the first permitted exception is applied.
After creating an exception, use the Test Filtering tool (see Test Filtering) to verify that client requests are filtered as expected.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Exceptions to Policies > Managing exceptions > If multiple exceptions could apply, which takes precedence?
Copyright 2016 Forcepoint LLC. All rights reserved.