M86 Security MSA, Installation Manual

Page: 68 / 118

B
EST
F
ILTERING
P
RACTICES
T
HREAT
C
LASS
G
ROUPS
62
M86 S
ECURITY
I
NSTALLATION
G
UIDE
J. Exception URL bypass
Use exception URLs to grant users access to URLs blocked at the root . To
grant users access to globally-blocked URLs, enable the exception URL bypass
option in the Minimum Filtering Level. For these users, add the exception URLs in
their profiles.
To set up the Exception URL bypass for users to bypass blocked URLs, go to:
•
POLICY: Policy > Global Group > Minimum Filtering Level > Min. Filter Bypass
• Policy > IP > member > Exception URL window
In the IR Web Filter User Guide index, see:
• How to: configure the Minimum Filtering Level: Bypass Options
• How to: set up Exception URLs
K. Proxy Patterns
Prevent users from using proxy patterns to bypass the Internet filter . Enable
Pattern Blocking for all users. In the profile, block Security > Web-based Proxies/
Anonymizers.
To set up the proxy pattern blocking feature and apply it to profiles, go to:
•
SYSTEM: System > Control > Filter window
• POLICY: Policy > IP > member > member Profile > Category tab
or POLICY: Policy > Global Group > Global Group Profile > Category tab
In the IR Web Filter User Guide index, see:
• How to: configure filtering
• How to: use library categories in a profile
L. File type blocking
Prevent users from downloading and using executable files that may
threaten your network security
. Create a custom category for file extensions and
add “.exe” to the URL Keyword list. Other files you might include in the list are: .dll,
.ocx, .scr, .bat, .pif, .cpl, .cmd, .hta, .lnk, .inf, .sys, .vbs, .vb, .wsc, .wsh, .wsf. Do
NOT include “.com” in the list, or the files will not be found and blocked. In the
applicable profiles, block this custom category and enable both URL Keyword
Filter Control and extension options.
To set up file type blocking and apply this feature to profiles, go to:
•
LIBRARY: Library > Category Groups > Custom Categories > Add Category
• Library > Custom Categories > category > URL Keywords
• POLICY: Policy > IP > member > member Profile > Category tab, and Filter
Options tab (URL Keyword Filter Control and extension options enabled)
or POLICY: Policy > Global Group > Global Group Profile > Category tab, and
Filter Options tab (URL Keyword Filter Control and extension options enabled)
In the IR Web Filter User Guide index, see:
• How to: set up a custom category
• How to: set up URL Keywords: Custom Categories
• How to: use library categories in a profile
• How to: set up profile options