Hi all -- So I was asked by mgmt to block social networking, streaming, etc for all users except administration. I created a custom URL Filtering profile that blocks those categories, as well as several specific sites. Under Policies -> Security, I created a new policy called "LimitedInternet", applied to all users, from the trust to untrust zones, and applied the custom, limited URL Filter. I have another security policy that is only applied to users in our domain's OpenInternet group, which uses the default URL Filter profile. Here's how it looks -- As I understand, the rules are applied top-down, and once a rule matches, it stops searching. So the first rule should apply to anyone in the OpenInternet group; if the user is not in that group, they should use the second, limited rule and have sites blocked. As it is, the LimitedInternet rule is applied to everyone, regardless of their group membership. Can anyone tell me what I'm missing here? (I apologize if this has been covered elsewhere, I tried searching, honest!) Thanks -- michael~
... View more
