URL
keyword—Looks for any occurrence of the letters or numbers within
a URL, and will match regardless of where the string is found (the string
"partner" would be considered a match for "http://www.playboy.com/partner.htm"
and the URL exempted). Using wildcards in this field greatly increases
the chance of false positives and unexpected results.
String—Limits
the search to the string as a whole, for example to target a specific
site, page, file, or other particular item.
Note:
For HTTPS decryption policies, the strings to match vary depending
on whether you set IWSVA in the proxy or transparency modes.
- In the proxy mode, IWSVA matches the domain names, not the full URL.
Thus, you only need to specify the domain names.
- In the transparency mode (WCCP or bridge mode), IWSVA matches the
CommonName
in the server certificates received.
- For HTTPS standard ports, IWSVA matches the CommonName
- For HTTPS non-standard ports, IWSVA matches CommonName:Port
Import approved list—You can import
an existing list of URLs that you want exempt from WRS and file type blocking
rules in an HTTP scanning policy, Applet or ActiveX policy, or through
URL filtering. For example, if you have a list of URLs from Trend Micro's
WebManager, or URLs you have compiled using a text editor, you can import
the list rather than enter them one-by-one. Imported lists must conform
to a defined standard.