Web Gateway 7.1.5 Product Guide - McAfee

Rules and rule sets
About rule sets 4
Sample wizard rule set system
When using the policy creation wizard to implement a rule set system, you might have made the
following selections:
Type of organization: commercial
Location: Europe
Level of strictness; limited (medium)
The wizard then creates, for example, the following rule set system (nested rules sets are not shown):
Table 4-2 Sample wizard rule set system (commercial – Europe – limited)
Rule set Description
Global Whitelist Lets whitelisted IP addresses, URLs, and responses with empty bodies skip all further
filtering.
Global Block Blocks IP addresses, authenticated users, and URLs entered in blocking lists.
Media Type Filtering Controls media type filtering with nested rule sets for uploading and downloading media
types.
Content Filter Exempts users if entered in a whitelist. Blocks users if entered in a blocking list. Blocks URLs
belonging to various categories.
Gateway AntiMalware Controls virus and malware filtering.
SSL Scanner Prepares SSL-secured web traffic for processing by other filtering functions with nested rule
sets for certificate verification and inspection enabling.
Default rule set system
The default rule set system is implemented if you do not use the wizard.
The following table shows the default rule set system (nested rule sets are not shown):
Table 4-3 Default rule set system
Rule set Description
SSL Scanner Prepares SSL-secured web traffic for processing by other filtering functions with nested rule
sets for certificate verification and inspection enabling.
Global Whitelist Lets requests that are sent from clients with whitelisted IP address or are directed to
websites with whitelisted URLs skip all further filtering.
Common Rules Provides functions that support the filtering process, such as web caching, progress
indication, and opening of archives.
Authenticate and
Authorize
Content Filter for
Unauthenticated User
Content Filter for
User Group “internet”
Content Filter for
User Group
“internet_strict”
Asks unauthenticated users to authenticate and blocks users who are not in an allowed user
group with nested rule sets for both functions.
Controls filtering of individual URLs, URL categories, and media types for unauthenticated
users.
Controls filtering of individual URLs, URL categories, and media types for users belonging
to a particular user group.
Controls filtering of individual URLs, URL categories, and media types for users belonging
to a user group that has a stricter blocking level applied to it. This can be achieved, for
example, by using block lists containing more or different entries compared to the lists used
for other groups.
Gateway Antimalware Controls virus and malware filtering using virus signatures and proactive methods.
McAfee Web Gateway 7.1.5 Product Guide 93