Umbrella SWG Web Policy strategy

[REJR77]

Hi

Does anyone has any experience feedback when creating Web policy with umbrella SWG?

I read about ruleset and rules in the doc but what is the best way to go ?

I have the idea to create a ruleset for roaming computers, and inside this ruleset creating several rules:

Rule1: Allow / AD Group1 / allowed destinations

Rule2: Block / AD Group1 / blocked destinations

And so one for other AD Groups....

Default Ruleset will act as a catch all blocking mostly everything.

Is it the good way to go or do you have good experience with this?

Thanks

[Ken Stieers]

That's how I did it.
Default has "all of the things we'd want to block, ever" and then allows as appropriate above that.
The rule 2 you have might only be if Rule one somehow allows something that would be blocked.

[REJR77]

Hi Ken

So you only have Allow rules for your users in rule sets and use the default rule set to block everything else?

[Ken Stieers]

Yes... I've got allows, and then block at the bottom