Applies to all Flex services and all deployment methods.
Flex rule configuration allows for a high level of granularity, allowing administrators to block specific content within a category. For instance, administrators can choose to block only audio files from within the Social Networking category, but allow all other content. This is accomplished during rule creation by selecting the Social Networking category under Compliance>Places>URL Categories>Leisure. And, within the same rule, also selecting audio file extensions under Compliance>Content Type>Audio. This will actually allow users to access Social Networking domains, but any audio on these domains will be blocked.
While this feature grants the administrator a high level of control within individual URL Categories, it can also lead to unexpected results. To block all access to an entire URL Category, administrators must be careful not to select any items from the Compliance>Content section. Selecting both will result in what is known as a compound rule, which will result in only the specified Content being blocked from the chosen URL Categories.
In order to block all files of a particular extension or type:
- Create a new rule and select only the File Extension or Content Type from the Compliance>Content page
- Select all URL Categories from under the Compliance>Places.
Another potential cause for a URL Category failing to be blocked is a conflicting rule that exists above the block rule. Since the Flex rule list operates in a top-down manner, the upper-most rules will be applied first and will take precedence over block rules listed below them.