Quantum SPARK 1500 - Application & URL Filtering

Managing the Access Policy
R81.10.X Quantum Spark 1500, 1600, 1800, 1900, 2000 Appliances Locally Managed Administration Guide|212
To configure Access Policy rules manually:
Go to the Access Policy > Policy page.
In the Access Policy > Blade Control page:
n
When no manual rules are configured, you can click the Firewall Policy link to add
manual rules to the Firewall policy.
n
When manual rules are configured, it shows the number of rules that are added. Click
manual rules to see them in the Access Policy.
Click Servers to see how many servers are defined in the appliance. If no servers are
configured, click Add aserver to add one. A server object is a defined IP address to which you
can also define a specific access policy and also incoming NAT rules if necessary. For
example, Port forwarding NAT. Automatically generated access rules to servers are created
above the default policy rules and can be seen in the Access Policy > Firewall Policy page.
You can create exception rules for servers as well in the Access Policy > Firewall Policy
page.
Application & URL Filtering
The Application & URL Filtering section lets you define how to handle applications and URL
categories on traffic from your organization to the Internet.
Application & URL Filtering are service based features and require Internet connectivity to
download the latest signature package for new applications and to contact the Check Point
cloud for URL categorization. This page lets you define the default policy for Application & URL
Filtering control. It is recommended by default to block browsing to security risk categories and
applications. You can also configure additional applications and categories to block by default
according to your company's policy. In addition, you can also select to limit bandwidth
consuming applications for better bandwidth control.
In addition to the On and Off buttons, you can select the URL Filtering Only mode. When you
select this option, only URLs and custom applications defined by URLs are blocked.
Predefined applications initially installed on your computer or added with automatic updates
are not blocked.
When you select the URL Filtering Only mode:
n
Rules that contain URLs are enforced. Any applications inside rules are not enforced.
n
Rules that contain custom URLs and custom applications are enforced.
n
Rules that contain application groups with both predefined applications and URLs are
enforced only for the URLs and custom applications. They are not enforced for the
predefined applications.
n
Applications are not updated through the automatic updates.