Nokia IP60 - Security Appliance, User Manual

Page: 261 / 494

Using Web Rules
Chapter 12: Setting Your Security Policy 261
b. Click
OK
.
The rule is deleted.
Using Web Rules
You can block or allow access to specific Web pages, by defining Web rules. If a user attempts to access a
blocked page, the
Access Denied
page appears. For information on customizing this page, see Customizing
the Access Denied Page on page 266.
If desired, you can permit specific users to override Web rules. Such users will be able to view Web pages
without restriction, after they have provided their username password via the
Access Denied
page. For
information on granting Web Filtering override permissions, see Adding and Editing Users on page 399.
In addition, you can choose to exclude specific network objects from Web rule enforcement. Users
connecting from these network objects will be able to view Web pages without restriction, regardless of
whether they have Web Filtering override permissions. For information on configuring network objects, see
Using Network Objects on page 134.
Note:
Web rules affect outgoing traffic only and cannot be used to allow or limit
access from the Internet to internal Web servers.
Note:
Web rules differ from the Web Filtering subscription service in the following
ways:
The Web Filtering service is subscription-based and requires a
connection to the Service Center, while Web rules are included with the
IP60 appliance.
The Web Filtering service is centralized, extracting URLs from HTTP
requests and sending the URLs to the Service Center to determine
whether they should be blocked or allowed. With Web rules, HTTP
requests are analyzed in the gateway itself.
The Web Filtering service is category based; that is, it filters Web sites
based on the category to which they belong. In contrast, Web rules
allow and block specific URLs.
You can use either content filtering solution or both in conjunction. When a user
attempts to access a Web site, the IP60 appliance first evaluates the Web rules. If
the site is not blocked by the Web rules, the Web Filtering service is then consulted.
For information on the Web Filtering service, see
Web Filtering on page 333.
The IP60 appliance processes Web rules in the order they appear in the
Web Rules
table, so that rule 1 is
applied before rule 2, and so on. This enables you to define exceptions to rules, by placing the exceptions
higher up in the
Web Rules
table.