Security Policy Rule for Application and URL Category

Reply
Highlighted
L0 Member

Security Policy Rule for Application and URL Category

Hi,

We have recently updated to 4.1.6 which gives more funtioinality regarding Security Policies.

I would like to know what steps are required to mix apps and URL categories in a single policy.

I had wanted to grant a user iTunes Access by Adding App-ID -  'itunes' and under the Service/URL Category - have 'Online Music'.

I believe this would remove the need to configure a whole URL filtering profile. But wanted to confirm ewxactly how this works or if ive misunderstood the functionality of this.

Any comment s would be apprciated.

Tags (2)

Accepted Solutions
Highlighted
L6 Presenter

Re: Security Policy Rule for Application and URL Category

If you click on the table border in security policies you can display the additional urlcategory column which is as you mentioned so you dont need to configure a whole url filtering profile as previously (which gives that the url filtering profile is to be used when you need more than one url category to be matched).

So yes if your allow rule is appid:itunes and urlcategory:online music it means that both must match for this rule to get a hit.

View solution in original post


All Replies
Highlighted
L6 Presenter

Re: Security Policy Rule for Application and URL Category

If you click on the table border in security policies you can display the additional urlcategory column which is as you mentioned so you dont need to configure a whole url filtering profile as previously (which gives that the url filtering profile is to be used when you need more than one url category to be matched).

So yes if your allow rule is appid:itunes and urlcategory:online music it means that both must match for this rule to get a hit.

View solution in original post

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!