TRITON - Web Security Help, Version 7.7 - Websense

Refine Filtering PoliciesLimited access filters provide a very precise method of filtering Internet access. Eachlimited access filter is a list of individual URLs or IP addresses. Like category filters,limited access filters are added to policies and enforced during a specified time period.When a limited access filter is active in a policy, users assigned that policy can visitonly URLs in the list. All other sites are blocked.For example, if the First Grade policy enforces a limited access filter that includesonly certain educational and reference sites, students governed by the First Gradepolicy can visit only those sites, and no others.When a limited access filter is active, a block page is returned for any requested URLnot included in that filter.Websense software can support up to 2,500 limited access filters containing 25,000URLs in total.Limited access filters and filtering precedenceTRITON - Web Security Help | Web Security Solutions | Version 7.7.xIn some cases, more than one filtering policy could apply to a single user. Thishappens when a user belongs to more than one group, and the groups are governed bydifferent policies.When multiple group policies apply to a user, the Use more restrictive blockingsetting (see Filtering order, page 97) determines how the user is filtered. By default,this setting is off.Websense software determines which filtering setting is less restrictive at the filterlevel. In cases where a user might be filtered by multiple policies, one of which isenforcing a limited access filter, “less restrictive” may sometimes seemcounterintuitive.When Use more restrictive blocking is OFF:If the Block All category filter and a limited access filter could apply, the limitedaccess filter is always considered less restrictive.If any other category filter and a limited access filter could apply, the categoryfilter is considered less restrictive.This means that even when the limited access filter permits the site and thecategory filter blocks the site, the site is blocked.When Use more restrictive blocking is ON, a limited access filter is considered morerestrictive than any category filter except Block All.256 Websense Web Security Solutions