Web Gateway 7.1.5 Product Guide - McAfee

Authentication and access management
Quota management 5
Blocking Sessions (rule set)
This section describes the rules in a library rule set for blocking sessions.
For general information on understanding and handling rules, see Rules and rule sets.
Library rule set — Blocking Sessions
Criteria — SSL.Client.Context.IsApplied equals true OR
Command.Name does not equal “CONNECT”
Cycle — Requests (and IM)
There is one nested rule set in this rule set:
• Blocking Sessions With URL Configuration
Blocking Sessions With URL Configuration
This nested rule set handles blocking sessions related to URL categories.
Nested library rule set — Blocking Sessions With URL
Configuration
Criteria — URL.Categories at least one in list URL
Categories Blocklist for Blocking Session
Cycle — Requests (and IM)
The rule set criteria specifies that the rule set applies when a user sends a request for a URL that falls
into a category on the blocking list maintained especially for blocking sessions.
The rule set contains the following rules:
Block user if blocking session is active
BlockingSession.IsBlocked equals true –> Block
The rule uses the BlockingSession.IsBlocked property to check whether a blocking session has been
activated for a user who sends a request. If it has, the request is blocked.
The action settings specify a message to the requesting user.
Activate blocking session if category is in list Category List for Blocking Session
URL.Categories at least one in list Category List for Blocking Session –> Continue —
BlockingSession.Activate
The rule uses the URL.Categories property to check whether a URL that a user requests access to
falls into a category on the blocking list maintained especially for blocking sessions. If it falls into a
category on the list, a blocking session is activated for the user.
The BlockingSession.Activate event is used to activate the blocking session. The event settings are
specified with the event.
McAfee Web Gateway 7.1.5 Product Guide 157