Hello
Our (Mandatory) Global policy is designed in a way that it blocks certain categories (lets say streaming media) at global level. The domains then inherit Global policy, and have their own set up policies. So, the actual policy looks something like (attached screenshot)
Question 1:
If something is blocked at Global policy, lets say xyzstreaming.com, is it possible to have it (or any of its
subdomain: test1.xyzstreaming.com ) unblocked at domain level? I am positive this won't work but taking expert advice.
Question 2:
Similar to Q1, my requirement is to block certain AD group from accessing internet (at domain level, not global). I created a "Mandatory" policy in Sub Domain, Action "Block with Reset" and under "Users" Tab, I selected the AD group, this still doesn't work, and I am suspecting because the Global Policy is evaluated first, the request for this domain never comes to this policy.
What is the best way to block internet in this situation? Only way I can think is to add this rule in Global policy.
Thank you.
