Administrator's Guide - Kerio Software Archive

13.2 URL Rules
for example a rule allowing access to certain pages without authentication
can be defined.
2. Unless authentication is required, the do not require authentication option is
ineffective.
• selected user(s) — applied on selected users or/and user groups.
Click on the Set button to select users or groups (hold the Ctrl and the Shift keys
to select more that one user /group at once).
Note: In rules, username represents IP address of the host fro which the user is
currently connected to the firewall (for details, see chapter 11.1).
And URL matches criteria
Action
Specification of URL (or URL group) on which this rule will be applied:
• URL begins with — this item can include either entire URL without the protocol
specified
(e.g. www.kerio.com/index.html), example of URL with wildcards * and (e.g.
*.kero.com*) or servername (e.g. www.kerio.com). Server names represent
any URL at a corresponding server (www.kerio.com/*).
Attention: If a URL example with wildcards is used, it must specify the whole
URL (see the examples above). One of frequent mistakes is using of the example
*.kerio.com — no real URL matches such example.
• is in URL group — selection of a URL group (refer to chapter 15.4) which the URL
should match with
• is rated by Kerio Web Filter rating system — the rule will be applied on all pages
matched with a selected category by the Kerio Web Filter module.
Click on the Select Rating... button to select from Kerio Web Filter categories. For
details, refer to chapter 13.3.
• is any URL where server is given as IP address — by enabling this option users
will not be able to bypass URL based filters by connecting to Web sites by IP
address rather than domain name. This trick is often used by servers offering
illegal downloads.
Warning: If access to servers specified by IP addresses is not denied, users can
bypass URL rules where servers are specified by names!
Selection of an action that will be taken whenever a user accesses a URL meeting a rule:
• Allow access to the Web site
• Deny access to the Web site — requested page will be blocked. The user will be
informed that the access is denied or a blank page will be displayed (according
to settings in the Advanced tab — see below).
Tick the Log option to log all pages meeting this rule in the Filter log (see chapter 22.9).
Go to the Advanced tab to define more conditions for the rule or/and to set options for denied
pages.
173