How to Create a URL Filter Policy Object

Last updated on 2024-08-19 11:07:37

As of firmware 8.3.1 and 9.0.0, Policy Profiles is part of the firmware. With the exception of a newly installed 9.0.0 firmware, where Policy Profiles is already pre-configured, you have the option to either continue using application rules like before or switch to Policy Profiles manually.

For more information, see:

Although it is not recommended, you can switch back to Application Rules, which gives access to configuring URL Filter Objects.
For more information on how to switch back to Application Rules, see How to Switch from Policy Profiles (back) to Application Rules.

A URL Filter Policy object determines how a website that matches one of the URL categories is handled by the Barracuda CloudGen Firewall. To override Barracuda Networks' URL database, you must define a custom URL block and allow lists. If you are migrating a large number of domains to your block or allow list, create a list with one domain per line. Use the bulk edit feature and copy/paste the list to the custom URL block or allow lists. In bulk edit more, you can only select one action for the allow list. To define the 'allow' action per domain, disable bulk edit. The following actions are available for each URL category:

Allow – The user can access the website.
Block – The user is blocked from viewing the website and is redirected to the customizable URL Filter block page. For more information, see How to Configure Custom Block Pages and Texts.
Warn and Continue – The user can visit the webpage after clicking Continue on the customizable URL Filter warning page. This action is logged to Box/Firewall/acknowledged. For more information, see How to Configure Custom Block Pages and Texts.
Alert – Visiting a website in this category is silently logged. Go to FIREWALL > Monitor, Filter Settings and activate the filter for 'Warned' to see the logged alerts.
Override – Allow the user to request temporary access from an admin. Upon receiving the request the override admin must log in to the override admin interface to grant access for a specific amount of time to this otherwise blocked URL category. The admin can only grant overrides for the URL category not for specific websites.

Before You Begin

Before you create URL Filter Policy objects. verify that you have enabled the URL Filter. For instructions on how to activate the URL Filter, see How to Enable Application Control

Create an URL Filter Policy Object

Go to CONFIGURATION > Configuration Tree > Box > Assigned Services > Firewall > Forwarding Rules.
Click Lock.
In the left menu, click URL Filter.
Create the URL Filter Policy object by either right-clicking the table and selecting New > URL Filter Policy object or by using the icons in the top-right area of the ruleset.

Click Advanced Settings. The URL Cat Policy Object - Advanced Settings window opens.
Select the Action if online URL database is unavailable.
Enter the timeout for Warn and Continue Override valid for [min]. Default: 10 min.
Click OK.

Click on Default Action and select Block, Allow or Alert from the dropdown.

Select Block, Allow, Warn and Continue, Alert or Override in the Action column for each URL category.

(optional) To allow-list or block-list specific domains, select Custom URLs.
1. For each block-listed domain, click + to add a domain to the Block List.
2. For each allow-listed domain, click + to select the action and to enter the domain name in the Allow List.

Enable Bulk Edit to enter a large number of domains. Each domain must use a new line. In bulk edit more, only one action can be set for the Allow List. Disable Bulk Edit after entering the domains to select the Action per entry.

Click Save.
Click Send Changes and Activate.

You can now apply the URL Filter policy object to selected Application Rules. For more information, see How to Create an Application Rule.