Add HTTP Inspection Policy: Specify Rules

HTTP > HTTP Inspection > Policies | policy name or Add | HTTP Inspection Rule

The Rules screen allows you to select the Inspection Filters for HTTP traffic. Adding an HTTP Inspection policy is a three-step procedure. First, you create an account to specify users, then you assign HTTP Inspection filtering rules to the new policy, and then you specify any exceptions.

• Enable policy—Enables or disables the individual policy; the global HTTP Inspection setting overrides the specifications of an individual policy.

• Inspection Filter—Choose the Inspection Filter to designate the type of traffic to which the policy will apply. The number of filters available is equal to the default filters plus any custom filters that have been created.

• Note: Create custom filters at HTTP > HTTP Inspection > Filters > Add.

•  The following describes the available filtering actions:

• Allow (scan)—Connection to the target server is allowed and users can access the Web site, but the content is scanned for malware.

• Allow (no scan)—Connection to the target server is allowed and users can access the Web site, but the content is not scanned for malware.

• Block—Connection to the target server is not established and users are not allowed to access the Web site. A log entry is also created for this event.

• Monitor—Connection to the target server is allowed and users can access the Web site. A log entry is also created for this event.

• Note: For the next section, restricted days and hours are defined at Administration > IWSVA Configuration > Work/Leisure Time.

• Action During/Work Time—Check the check box of the inspection filter name (or names) beside the work time column. (To select all the filters, click the check box at the top of the column.) Select the Action to be applied from the drop-down list. Click Apply to apply the filtering action to the traffic found by the selected inspection filters.  

• Action During/Leisure Time—Check the check box of the inspection filter name (or names) beside the Leisure column. (To select all the filters, click the check box at the top of the column.) Select the Action to be applied from the drop-down list. Click Apply to apply the filtering action to the traffic found by the selected inspection filters.  

• Note: Unspecified times are considered "leisure" times.

• Notes—Use to create policy notes, for example, to summarize the intent or justification for the policy. It can serve as a simple reminder or as a communication to others who could later administer HTTP Inspection.

See also:

• Add HTTP Inspection Policy Exceptions

• HTTP Inspection Filters