Kerio Tech Firewall6, Administrator'S Manual

Page: 196 / 404

Chapter 14 Definitions
196
Note:
1. Generally, protocol inspectors cannot be applied to secured traffic (SSL/TLS). In this case,
WinRoute “perceives” the traffic as binary data only. This implies that such traffic cannot
be deciphered.
2. Under certain circumstances, appliance of a protocol inspector is not desirable. There-
fore, it is possible to disable a corresponding inspector temporarily. For details, refer to
chapter 7.7 .
14.4 URL Groups
URL Groups enable the administrator to define HTTP rules easily (see chapter 12.2 ). For exam-
ple, to disable access to a group of web pages, you can simply define a URL group and assign
permissions to the URL group, rather than defining permissions to each individual URL rule.
A URL group rule is processed significantly faster than a greater number of separate rules for
individual URLs. It is also possible to cascade URL groups.
URL groups can be defined in Configuration
→
Definitions
→
URL Groups .
Figure 14.9 URL Groups
Matching fields next to each item of the group can be either checked to activate or unchecked
to disable the item. This way you can deactivate items with no need to remove them and to
define them again.
Note: The default WinRoute installation already includes predefined URL groups:
• Ads/Banners — common URLs of pages that contain advertisements, banners, etc.