Custom URLs

©2000, Cisco Systems,

When using the Master Database—the list of URLs that should be blocked as determined and updated daily by the WebSENSE corporate office—you may need to permit one of the blocked URLs. If you need to permit URLs that are normally blocked by the parameters of the Master Database, you can add the URLs to a special "permit list." URLs in this list will never be blocked by WebSENSE. When accessing a URL that has been added to the permit list, WebSENSE logs the access as normal.

To add a URL to the permit list, click Permit in the Custom URLs tab. Choose which protocol to use from the drop-down list next to Permit, then enter the URL in the field that follows. Click the Add button. The URL then appears in the URLs window with the designation "Permit."

Sometimes certain URLs are not blocked by either the WebSENSE configuration or the Master Database. If you need a specific URL blocked, add the URL to a special "screen list." After these URLs have been added, when users attempt to access the URLs specified on the screen list, they will be blocked and the event logged by WebSENSE.

To screen a URL, click Screen in the Custom URLs tab. Choose the category under which to track the site from the drop-down list next to Screen. (There is a special category called User Defined, which can be used as a general purpose category to hold miscellaneous URLs.) Choose which protocol to use from the drop-down list next to Permit, then enter the URL in the field that follows. Click the Add button. The URL then appears in the URLs window with the designation "Screen."

Workstations Tab

©2000, Cisco Systems,

©2000, Cisco Systems,

The Workstations tab enables you to determine a workstation's Internet access capabilities. You can give a workstation unrestricted access to the Internet, or block a workstation from any access to the Internet.

When workstations with unrestricted Internet access try to access a URL that is normally blocked by WebSENSE, their access is logged by WebSENSE as an observed access. To give a workstation unrestricted access, select Never in the Workstation Override frame, enter the workstation's IP address in the field that follows, and click Add.

Workstations that have been restricted from accessing the Internet completely will not have HTTP access to the Internet. To restrict Internet access for a workstation, select Always in the Workstation Override frame, then enter that workstation's IP address in the field that follows, and click the Add button. The IP address will appear in the Always Blocked frame.

Messages Tab

By default, when you attempt to access a web site that WebSENSE is blocking, you receive the message "Access to the desired web page is not permitted". Instead of using the default message, you can send the user who is trying to access the blocked URL to a different web page. For example, if a user tries to access a blocked web page, they are sent to a web site that explains that access to the web site is not permitted, including any other information you wish.

To send the user who is trying to access the blocked URL to a different web page, select URL in the HTTP Message frame and then enter the URL in the field that follows..

The rest of the fields in the Messages tab are not usable because the PIX Firewall does not support the filtering of other protocols at this time.

0 0

Post a comment