How to Create an Explicit Web Filter Policy

The Barracuda SecureEdge Manager allows administrators to configure an explicit Web Filter policy. Explicit Web Filter policies take precedence over predefined security policies. An explicit Web Filter rule blocks or allows URLs from specified sources. In addition, you can now either alert or warn users against suspicious traffic.

The following actions are available for the Explicit Web Filter policy :

• Allow – The user can access the website.

• Block – The user is blocked from viewing the website.

• Alert – The user is allowed to access websites in this category, but the action is silently logged.

• Warn – The user is redirected to a warning page and must click Continue to access the requested website. Note that Continue will implicitly cause a security inspection.

Before You Begin

• If you want to use the users or groups from user directories (such as Microsoft Entra ID, LDAP, Google Workspace, Okta, and Barracuda Cloud Control) for Web Filter policies, you must first connect your SecureEdge Identity Management in order to synchronize users and groups. For more information, see Identity Management. 

• If you want to select users or groups from user directories such as BCC-linked Microsoft Entra ID or the BCC-linked LDAP directory in Web Filter policies, you must first connect your directory with Barracuda Cloud Control in order to synchronize users and groups. For more information, see LDAP Active Directory and Microsoft Entra ID and How to Connect Microsoft Entra ID with Barracuda Cloud Control.

Create an Explicit Web Filter Policy

1. Go to https://se.barracudanetworks.com and log in with your existing Barracuda Cloud Control account.

2. In the left menu, click the Security Policy.

3. Expand the Web Filter menu on the left and select Policies.   
   

   

4. The Policies window opens. Click the Explicit tab. 

5. The Explicit configuration window opens. To create a new rule, click Add Rule. 
   

   

6. The Add Explicit window opens. Specify values for the following:

   • Name – Enter a unique name.

   • Description – Enter a brief description.

   • Action – Select an action type. You can choose between Allow, Block, Alert, and Warn.
     If you select Action = Allow or Alert or Warn, the Silent field is disabled.
     If you select Action = Block, you are provided with the option to silently block the rule:

     • Silent –  Click to enable/disable. By default, Silent field is disabled.

   • In the SOURCE CRITERIA section, specify values for the following:

     • Type – Select a source type. You can choose between IP/Network, Site, and User/Group.

     • IP/Network – Enter the IP address or network, and click +.

   • In the DESTINATION CRITERIA section, specify values for the following: 

     • Type – Select destination type. You can choose between URL Category, Custom Categories, and Domain.

       • If you select URL Category, select the categories from the drop-down menu to specify the categories you want to allow/block.

       • If you select Domain, enter one or more domains and click +. 

       • If you select Custom Categories, select the custom category from the drop-down menu, or type to search. 
         

         

7. Click Save.

Edit an Explicit Web Filter Policy

1. In the left menu, click the Security Policy.

2. Expand the Web Filter menu on the left and select Policies. 

3. The Policies window opens. Click the Explicit tab. 

4. The Explicit configuration window opens. Click on the pencil icon next to the rule you want to edit.
   

   

5. The Edit Explicit window opens. Edit the value you are interested in.

6. Click Save.

Remove an Explicit Web Filter Policy

1. In the left menu, click the Security Policy.

2. Expand the Web Filter menu on the left and select Policies. 

3. The Policies window opens. Click the Explicit tab. 

4. The Explicit configuration window opens. Click on the trash can icon next to the rule you want to remove.
   

   

5. The Delete Rule window opens.
   

   

6. Click OK to confirm.