Web Gateway 7.1.5 Product Guide - McAfee

6
Web filtering
Global whitelisting
Global whitelisting
URLs and other web objects can be placed on global whitelists to skip all further filtering for related
requests. This section explains global whitelisting and describes a library rule set for this function, as
well as some lists used by the whitelisting rules.
Rules for global whitelisting
This section explains what a global whitelisting rule set does and describes a sample library rule set.
A rule set for global whitelisting contains at least one whitelisting rule for a particular object type, for
example, for URLs. The rule uses a list to stop the filtering cycle for web objects that have been entered
onto it.
The rule set is typically placed at the beginning of a rule set system and before the rule sets that do
virus and malware filtering, URL filtering, and other filtering jobs. This way, all these rule sets are not
processed in the current cycle when the rule or rules of the global whitelisting rule set apply.
The impact of the rule set is global because it does not only disable a particular kind of filtering, but all
filtering that would have been executed after it in the filtering process.
Global Whitelist
This section describes the rules in a library rule set that exempts requests from all further filtering when
they are related to web objects on particular lists.
For general information on understanding and handling rules, see Rules and rule sets.
Library rule set — Global Whitelist
Criteria — Always
Cycle — Requests (and IM), responses, embedded objects
The rule set contains the following rules:
Client IP is in list Allowed Clients
Client.IP is in list Allowed Clients –> Stop Cycle
The rule uses the Client.IP property to check whether the IP address of a client that a request was
sent from is on the specified whitelist. If it is, the rule applies and stops the current processing
cycle. The request is then forwarded to the appropriate web server.
URL.Host matches in list Global Whitelist
URL.Host matches in list Global Whitelist –> Stop Cycle
The rule uses the URL.Host property to check whether the host that a URL sent in a request
provides access to is on the specified whitelist. If it is, the rule applies and stops the current
processing cycle. The request is then forwarded to the web server that is the requested host.
214 McAfee Web Gateway 7.1.5 Product Guide