Kerio Tech Firewall6, Administrator'S Manual

Page: 156 / 404

Chapter 12 HTTP and FTP filtering
156
Rules in this section are tested from the top of the list downwards (you can order the list
entries using the arrow buttons at the right side of the dialog window). If a requested URL
passes through all rules without any match, access to the site is allowed. All URLs are allowed
by default (unless denied by a URL rule).
Note: URLs which do not match with any URL rule are available for any authenticated user
(any traffic permitted by default). To allow accessing only a specific web page group and block
access to other web pages, a rule denying access to any URL must be placed at the end of the
rule list.
The following items (columns) can be available in the URL Rules tab:
• Description — description of a particular rule (for reference only). You can use the
checking box next to the description to enable/disable the rule (for example, for a cer-
tain time).
•
Action — action which will be performed if all conditions of the rule are met ( Permit —
access to the page will be allowed,
Deny
— connection to the page will be denied and
denial information will be displayed, Drop — access will be denied and a blank page
will be opened, Redirect — user will be redirected to the page specified in the rule).
• Condition — condition which must be met to apply the rule (e.g. URL matches certain
criteria, page is included in a particular category of the ISS OrangeWeb Filter database,
etc.).
• Properties — advanced options for the rule (e.g. anti-virus check, content filtering,
etc.).
The following columns are hidden by default. To view them, use the Modify columns function
in the context menu — for details, see chapter 3.2 .
• IP Groups — IP group to which the rule is applied. The IP groups include addresses of
clients (workstations of users who connect to the Internet through WinRoute ).
• Valid Time — time interval during which the rule is applied.
• Users List — list of users and user groups to which the rule applies.
Note: The default WinRoute configuration includes a set of predefined rules for URL traffic.
These rules are disabled by default. These rules are available to the WinRoute administrators.
URL Rules Definition
To create a new rule, select a rule after which the new rule will be added, and click Add . You
can later use the arrow buttons to reorder the rule list.
Use the Add button to open a dialog for creating a new rule.