To create a new
policy, simply select New Policy from
the menu. Figure 6.2 shows New Policies page.
Figure 6.2 - The Basic “New Policy” Page
To create a new
policy, enter a unique name, a description for the policy, a colour code and
then choose the mode.
|
|
Note Colour
codes are important as they are used in setting the schedules (see Working with Schedules) |
The easiest way to
select a colour is to click the Pick
button and select the colour from the Colour
Selection Chart (see Figure 6.3).
Figure 6.3 - New Policy Colour Selection Chart
The Mode options are as follows:
Open: A user/workstation in a group assigned this policy can go anywhere.
This mode is totally unfiltered; the user/workstation even has access to
HTTPS/CONNECT methods.
Closed: A user/workstation in a group assigned this policy can go nowhere.
They are totally blocked from web surfing.
Filtered: A user/workstation in a group assigned this mode can have various
filters set on, or off.
Advisory: Users assigned this policy will still be blocked from sites as they
would with a filtered policy. However, they will be able to override the block
themselves. Visits to these overridden blocks are logged as visits to blocked
sites to allow an administrator to ascertain if someone is abusing the
privilege. These policies are intended for the use of senior staff only.
Restricted: A user/workstation in a group assigned this policy can only visit
sites or site types permitted by the policy.
If the mode is set to
either Filtered, Restricted or Advisory, then CN Pro will display three
additional fields (Figure 6.4).
Figure 6.4 – The Policy Parsing Selectors
The default settings
for these selectors are shown in Figure 6.4.
The alternate
setting for the “If Rules Conflict”
selector is “Allow Rules Override Block Rules”.
The default setting
ensures that where conflicts occur, if any category is blocked for a URL then
the visit will be blocked.
This setting is important
because any URL may be in more than one category (see Content Classifier Tool and How
is any particular policy parsed? for
further information).
Once the setting has
been chosen, CN Pro will successfully resolve any conflicts. With the default option, if any one category
is blocked, then access to the URL will be blocked. With the Allow Rules Override Block Rules setting
the reverse will be true.
The second option
deals with sites that are classified as Dynamic
Sites by the Content Classifier. These are special sites, such as Google
and Wikipedia that may contain both useful, as well as undesirable content.
The default option
means that, although the site is classified, the real-time Raters will still be called to determine the list of categories the
URL falls into. CN Pro will then base its decision on whether to allow or block
the site based upon the configured preferences.
The alternate
setting is URL Database Categories
override real-time content analysis.
With this setting, the classification contained in the CSRV is the final
arbiter and no real-time rating takes place.
The Time Quota field
can be set to a number of different values, so please set a value that suits
you.
The way it works is
as follows. Any category in the Custom
URL Filter module or the Content Classifier module (see below) which has been
set to “Allow” can, optionally, be selected to have the quota apply.
If the quota
applies, then each user using this policy will only be allowed to surf urls
within the category for that amount of time each day. After they have browsed urls within a
category for that length of time they will receive a block message until the
next day (quotas are reset at
If a url falls
within multiple categories, if any one category is quota controlled, then the
quota will apply, even if the other category is not quota controlled.
The rest of this
section shows all of the configuration options available for a filtered policy.
Related Topics
Working with Policies
The Custom Filter
The Content Classifier
File Extension Filter
The MIME Type Filter
Active Image Control
Upload Filter
