Web Gateway 7.1.5 Product Guide - McAfee

Monitoring
Error handling 8
Block on URL Filter Errors
This nested error handling rule set blocks access to all web objects when the URL Filter module cannot
be loaded or another error regarding this module occurs.
Nested error handling rule set — Block on URL Filter Errors
Criteria — Error.ID greater than or equals 15000 AND Error.ID less
than or equals 15999
The rule set criteria specifies that the rule set applies when the value of the Error.ID property lies within
the specified range, which is the range for errors related to URL filtering.
The rule set contains the following rules:
Block if Anti-Malware engine cannot be loaded
Error.ID equals 15000 OR Error.ID equals 15002 OR Error.ID equals 15004 OR Error.ID equals
15005 –> Block
The rule blocks all requests for web access when the value of the Error.ID property is one of those
specified in the rule criteria. These values indicate errors that prevent the URL Filter module from
loading.
The action settings specify a message to a requesting user.
Block all other internal URL Filter errors
Always –> Block
The rule is always executed when its rule set applies and the rule preceding it in the rule set has
not been executed. The rule then blocks all requests for web access.
The action settings specify a message to a requesting user.
Block on All Errors
This nested error handling rule set blocks access to all web objects when an internal error occurs on the
appliance.
Nested error handling rule set — Block on All Errors
Criteria — Always
The rule set contains the following rule:
Always block
Always –> Block
The rule blocks access to all web objects when an internal error occurs.
The action settings specify a message to a user who requested access.
The rule in this rule set is for handling internal errors on the appliance. It is executed at the time
when an internal error occurs, which can, of course, not be predicted and can happen at any time
during the filtering process or not at all. In this sense, processing the rule is not part of the normal
process flow.
After executing the blocking, the rule stops all further processing of rules for the requests,
responses, or embedded objects that were being filtered when the internal error occurred.
This way it is ensured that no malicious or inappropriate web objects enter your network or leave
it while the appliance is not fully available.
The process flow continues when the next request is received if the internal error did not lead to a
general interruption of the appliance functions.
McAfee Web Gateway 7.1.5 Product Guide 313