Hi All,

Ok, here's my situation.

We want to be able to set a base level of restrictions for both urls and web content filters. Then, during business hours 9:00-12:00, and 14:00 - 17:30 have a higher level of filtering to restrict what our employees can do. Ive managed to set this up by setting the basic level of filtering (porn etc) in the firewall general setup, and setup 2 basic profiles for url and content filtering.

Then under firewall > filter setup > data filter ive added an additional filter that uses a schedule setup to the above times that loads 2 profiles of higher url and content filtering. This all works great, and i think this is the best way to do it.

What im trying to do now is allow certain classified sites through to 1 ip, eg, allow sports sites through at all times. Im a bit confused as to how to set this up, ive tried setting up another filter profile and setting it to pass if no further match, then set up a csm content profile to allow sports, but all that does is allow sports only and no other websites. Is it possible to have cumulative rules so that it uses the base layer of filtering that I already have but just allows sports through for one particular ip.

Thanks

Oli

Have you set the action for the web content filter to Pass instead of Block? If so that would act as a whitelist so only sports sites would be allowed through. What you will need to do is make a firewall rule with the source IP address that you want to allow the sports sites for and create another web content filter profile with all the sites you want to block normally without blocking the sports sites and apply that profile to the filter rule.

Hi,

Yeah ive created a content filter with only sports turned on and set to allow. This just has the effect of allowing only sports sites through, rather than having sports sites allowed and the original set of restricted sites still banned.

Ive setup a firewall filter for that single IP and assigned the sports CSM content rule to it, but it just blocks everything apart from sports sites, which is not what I want.