<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Predefined URL Category Filtering in Web Security</title>
    <link>https://community.cisco.com/t5/web-security/predefined-url-category-filtering/m-p/1350115#M976</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;First access policy wins.&amp;nbsp; It's processed from top-down.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;If you haven't, adjust your identity policies to match on authenticated users first, IPs second.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Create a new access policy, place it at the top of the list.&amp;nbsp; &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Change &lt;EM&gt;Identities&lt;/EM&gt; to Select one or more...&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Change &lt;EM&gt;Select Identity...&lt;/EM&gt; to the Identity Policy that matches your AD authentication.&amp;nbsp; Check the Selected G&lt;EM&gt;roups&lt;/EM&gt; radio button.&amp;nbsp; Click groups, add the group you want to allow access with.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Click the &lt;EM&gt;Advanced&lt;/EM&gt; button at the bottom of the screen.&amp;nbsp; Click &lt;EM&gt;URL Categories&lt;/EM&gt;.&amp;nbsp; Choose the URL category you want to allow access to.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;After you click OK/Submit a couple times, you should be back at the list of access policies.&amp;nbsp; Click the box inside &lt;EM&gt;URL Categories&lt;/EM&gt; that matches the access policy you just created.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Check the appropriate mode for that URL category (monitor, warn, block, allow, time-based, etc).&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Click ok.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Apply.&amp;nbsp; Test.&amp;nbsp; &lt;SPAN __jive_emoticon_name="happy" __jive_macro_name="emoticon" class="jive_macro jive_emote" src="https://community.cisco.com/images/emoticons/happy.gif"&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Mon, 08 Feb 2010 23:58:54 GMT</pubDate>
    <dc:creator>nadamsgreektown</dc:creator>
    <dc:date>2010-02-08T23:58:54Z</dc:date>
    <item>
      <title>Predefined URL Category Filtering</title>
      <link>https://community.cisco.com/t5/web-security/predefined-url-category-filtering/m-p/1350114#M975</link>
      <description>&lt;P&gt;We are running IronPort S160 and have created Identities and Access Policies.We have created AD groups and use those groups for validating against access policies.However for one of the department in a group we need to allow a URL Category that is currently blocked for everybody in that group.&lt;/P&gt;&lt;P&gt;How can we go about doing this?&lt;/P&gt;</description>
      <pubDate>Mon, 08 Feb 2010 16:53:19 GMT</pubDate>
      <guid>https://community.cisco.com/t5/web-security/predefined-url-category-filtering/m-p/1350114#M975</guid>
      <dc:creator>abhishek.1024</dc:creator>
      <dc:date>2010-02-08T16:53:19Z</dc:date>
    </item>
    <item>
      <title>Re: Predefined URL Category Filtering</title>
      <link>https://community.cisco.com/t5/web-security/predefined-url-category-filtering/m-p/1350115#M976</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;First access policy wins.&amp;nbsp; It's processed from top-down.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;If you haven't, adjust your identity policies to match on authenticated users first, IPs second.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Create a new access policy, place it at the top of the list.&amp;nbsp; &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Change &lt;EM&gt;Identities&lt;/EM&gt; to Select one or more...&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Change &lt;EM&gt;Select Identity...&lt;/EM&gt; to the Identity Policy that matches your AD authentication.&amp;nbsp; Check the Selected G&lt;EM&gt;roups&lt;/EM&gt; radio button.&amp;nbsp; Click groups, add the group you want to allow access with.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Click the &lt;EM&gt;Advanced&lt;/EM&gt; button at the bottom of the screen.&amp;nbsp; Click &lt;EM&gt;URL Categories&lt;/EM&gt;.&amp;nbsp; Choose the URL category you want to allow access to.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;After you click OK/Submit a couple times, you should be back at the list of access policies.&amp;nbsp; Click the box inside &lt;EM&gt;URL Categories&lt;/EM&gt; that matches the access policy you just created.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Check the appropriate mode for that URL category (monitor, warn, block, allow, time-based, etc).&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Click ok.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Apply.&amp;nbsp; Test.&amp;nbsp; &lt;SPAN __jive_emoticon_name="happy" __jive_macro_name="emoticon" class="jive_macro jive_emote" src="https://community.cisco.com/images/emoticons/happy.gif"&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Mon, 08 Feb 2010 23:58:54 GMT</pubDate>
      <guid>https://community.cisco.com/t5/web-security/predefined-url-category-filtering/m-p/1350115#M976</guid>
      <dc:creator>nadamsgreektown</dc:creator>
      <dc:date>2010-02-08T23:58:54Z</dc:date>
    </item>
  </channel>
</rss>

