Administrator's Guide - Kerio Software Archive

13.2 URL Rules
• A page informing the user that access to the required page is denied as it is
blocked by the firewall. This page can also include an explanation of the denial
(the Denial text item).
The Unlock button will be displayed in the page informing about the denial if the
Users can Unlock this rule is enabled. Using this button users can force WinRoute
to open the required page even though this site is denied by a URL rule. The rule
will be opened for certain time (10 minutes by default). Each user can unlock
a limited number of denied pages (up to 10 pages at once). All unlocked pages
are logged in the Security log (see chapter 22.11).
Rules can be unlocked only by users with corresponding rights (see chapter 16.1).
This implies that unauthenticated (anonymous) users can never unlock rules.
Note:
1. If any modifications are done within URL rules, all unlock rules are removed
immediately.
2. For security reasons, no HTML tags are allowed in the restriction text. If the
plaintext format is not sufficient, it is recommended to use redirection to
another page (see below).
• A blank page — user will not be informed why access to the required page was
denied (they will be even not informed about existence of Kerio Control).
• Another page — user’s browser will be redirected to the specified URL. This
option can be helpful for example to define a custom page with a warning that
access to the particular page is denied.
In the Content Rules section you can set filtering of specific elements of web pages matching
the particular URL rule. Parameters on this tab can be set only for rules allowing access (on
the General tab, the Allow access to the web site option is checked).
Figure 13.4
Options for Websites with content meeting a URL rule
175