We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Web Security Service

Why doesn’t my block rule deny access to a URL Category that I have selected in my Web Security Flex?

  • Type: Knowledgebase
  • Date changed: 6 years ago
Solution #00006233

Scope:

Applies to all Flex services and all deployment methods.

Answer:
Flex rule configuration allows for a high level of granularity, allowing administrators to block specific content within a category. For instance, administrators can choose to block only audio files from within the Social Networking category, but allow all other content. This is accomplished during rule creation by selecting the Social Networking category under Compliance>Places>URL Categories>Leisure. And, within the same rule, also selecting audio file extensions under Compliance>Content Type>Audio. This will actually allow users to access Social Networking domains, but any audio on these domains will be blocked.

While this feature grants the administrator a high level of control within individual URL Categories, it can also lead to unexpected results. To block all access to an entire URL Category, administrators must be careful not to select any items from the Compliance>Content section. Selecting both will result in what is known as a compound rule, which will result in only the specified Content being blocked from the chosen URL Categories.

In order to block all files of a particular extension or type:
  1. Create a new rule and select only the File Extension or Content Type from the Compliance>Content page
  2. Select all URL Categories from under the Compliance>Places.
Additional notes:
Another potential cause for a URL Category failing to be blocked is a conflicting rule that exists above the block rule. Since the Flex rule list operates in a top-down manner, the upper-most rules will be applied first and will take precedence over block rules listed below them.