Barracuda Content Shield (BCS) provides visibility into customer web activity while enforcing access policies across all users and devices. With more than 170 URL categories, BCS does more than protect your customers from malicious websites; it also ensures that you’re protecting their employees from accessing sites that would violate company policy, norms, and standards.
With BCS Plus, you can either use preset filtering policies or create customized policies for a particular user or group, and base policies on either categories, domains, or URLs.
Configuring Local or LDAP Users and Groups
If you have not already done so, you can either manually add local users and groups, or synchronize your LDAP / AD services with the BCS service – this enables you to apply policies by users and / or groups. To connect to your LDAP, see LDAP Active Directory and BCS. Or you can choose to Manually Configure Local Users and groups.
- Click Manage for the account for which you want to configure rules/policies.
- Click on Advanced Filtering in the left pane.
- On the Advanced Filtering page, click Add Rule. Click in the text box at the top of the popup to select one or more users or groups.
- Select an Action of Block or Allow.
- Select a rule Type of either Categories, Domains, or URLs.
- Check each category for which you want the rule to apply, or enter the target domain or URL in the pop-up.
- Click Save.
How Rules Are Applied (Order of Precedence)
Rules are applied in the order in which they appear in the table. Each rule takes precedence over the rule(s) listed below that rule. For example, you may create a group rule that blocks YouTube.com for Everyone or for a specific group of users. If you want to create a separate policy allowing one user to access YouTube.com, and that user is part of the group for which you created the block rule, you must place the rule for the user above the rule for the group. If you place the policy for that user below the group policy, then YouTube.com would be blocked for that user as well.
After you have created rules for users and/or groups, you can create a new rule:
- By clicking More Options () in the table row for a user or group, and then clicking Create Rule in the drop-down. This adds another rule for that user or group.
- By clicking ADD RULE to create a new rule for a different user or group.
Traffic that is affected by advanced filtering policies is logged in the Web Filtering Logs.
How Domains Are Categorized
Barracuda Networks uses one of the most extensive web content definition databases, covering some of the highest risk websites on the Internet. The websites in the Barracuda Networks database are organized into content categories (subcategories) which are grouped by supercategories. When you create rules that block categories of websites, you can choose a supercategory to block, or you can drill down and block websites at the subcategory level. See Web Use Categories for a list of content categories.
Viewing Configured Filtering Policies
If you have already configured Advanced Filtering policies by user or group, the following displays in a table on the Advanced Filtering page in a separate section for each user or group. You can click the blue chevron to expand or hide the policies for each user or group.
- Order – The order in which the rule is applied, relative to other rules you have created. (0=first, 1=second, etc.). You can click More Options () in the table and select Move to Top or Move to Bottom to change the order in which the rules are applied.
- Action – Block or Allow
- Type – How the rule is defined; either by categories, domains, or URLs
- Rule – Lists values included in the rule
Deleting a Group
At the right of a table row for a group, click More Options () for a drop-down and click Delete.
Adjusting Policies for Users and Groups
After you have created and tested Advanced Filtering policies, you may need to adjust settings according to the needs of your organization based on the following (or other) reasons:
- Changes in browsing or business policies of your organization
- Need for access to some domains that are included in a category that you need to block, in general