Web Gateway 7.1.5 Product Guide - McAfee

Whitelists for virus and malware filtering
Web filtering
Virus and malware filtering 6
You can maintain whitelists for web objects to let them skip virus and malware filtering. This section
explains how this is done and describes some sample whitelists.
You can add entries for particular web objects, such as URL, media types, and others, onto whitelists.
The rules of the virus and malware filtering rule set use these lists and let the rule that would
eventually block the objects not be processed.
Note: This means that when you edit a whitelist, you also modify the rule that uses it. You should therefore
make sure you know which rule uses a list that you edit.
You can do this, for example, by reviewing the rules of the virus and malware filtering rule set to see which
list names appear in rule names and criteria.
Whitelists are created at the initial setup of the appliance together with the corresponding rules and
rule sets. You can also create lists of your own.
The procedures used to maintain whitelists differ according to the list type. For example, you can add
wildcard expressions to a whitelist for URLs by typing them into the list. When adding media types,
however, you select them from folders with media type groups.
Sample whitelists for virus and malware filtering
This section describes some sample whitelists used by the library Gateway Antimalware rule set.
When you import the rule set, these lists are also imported. You can find them on the Lists tab of the
Policy top-level menu, sorted by their types and names.
For general information on how to maintain lists, see List maintenance.
User Agent Whitelist
List of wildcard expressions for user agents
Requests for URLs that have user agents matching these expressions are allowed to skip virus and
malware filtering by an appropriate rule.
Type — Wildcard Expression
The list is initially empty.
The following table describes the list entries.
Table 6-1 User Agent Whitelist
Option Definition
Wildcard Expression Wildcard expression for user agents
Comment Plain-text comment on a wildcard expression
Antimalware URL Whitelist
List of wildcard expressions for URLs
Requests for URLs matching these expressions are allowed to skip virus and malware filtering by an
appropriate rule.
Type — Wildcard Expression
The list is initially empty.
The following table describes the list entries.
Table 6-2 Antimalware URL Whitelist
Option Definition
Wildcard Expression Wildcard expression for URLs
Comment Plain-text comment on a wildcard expression
McAfee Web Gateway 7.1.5 Product Guide 177