Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Control » regarding override or Policy inheritance
  •  
ps.nepali@gmail.com

Messages: 12
Karma: 0
Send a private message to this user
hi, Cool

Can any one help me regarding " override or Policy inheritance "

[ KWR > Content Filtering > HTTP Policy > URL Rules ]

I have set some URL rules which restricts users from downloading *.exe, *.scr and some other extensions.

But i would like to have some exceptions in this rule. Sites like " *kerio.com/* " , "*microsoft.com/*" etc need to be automatically allowed. // Purpose : automatic live update.

Is there any good way out ?
is there someting like " override or Policy inheritance " in KWR ? Smile Smile Smile
  •  
winkelman

Messages: 2119
Karma: 3
Send a private message to this user
Ah, I had the same issue. My users cannot download zip-files, but now Symantec Anti-virus liveupdate would not work anymore... It's easy to solve:

ABOVE the rule that blocks the zip-files I created a rule that allows traffic to liveupdate.symantec.com and liveupdate.symantecliveupdate.com. Because it is above the rule that blocks zip-file, this rule will spring into action upon downloading a zip-file (or any other thing) from the Symantec servers (allowing the connection).

It's the order of the rules that makes the diffirence. The first rule to 'fit' the connection will be the one that applies.

  •  
ps.nepali@gmail.com

Messages: 12
Karma: 0
Send a private message to this user
Laughing

Thanks
Great it worked. It works buttom ^ up while implementing policy.

One prob. is solved !
but another evolved ! is there a way to allow this to some specific IP address only. !!!


Very Happy Very Happy
  •  
feite

Messages: 523
Karma: 0
Send a private message to this user
If you mean a specific internal ip address:

go to the advanced tab and fill in the 'Valid for IP address group'.

If you mean a specific external ip address or url:

specify a more specific address for the field 'URL begins with'. You can use wildcard like this www.somesite.com/*.
Previous Topic: VPN <=> Outlook Problem
Next Topic: my kerio virus database version is always 4350
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Tue Nov 21 18:14:21 CET 2017

Total time taken to generate the page: 0.00369 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.