ZyXEL Communications ATP800 - Apply to a Security Policy

Chapter 27 Content Filter
ZyWALL ATP Series User’s Guide
508
The following table describes the labels in this screen.
27.2.1 Apply to a Security Policy
Click the icon in the Action field to apply the entry to a security policy.
Go to the Configuration > Security Policy > Policy Control screen to check the result.
Table 205 Configuration > Security Service > Content Filter > Profile
LABEL DESCRIPTION
General Settings
Enable HTTPS Domain Filter
for HTTPS traffic
Select this check box to have the Zyxel Device block HTTPS web pages using the
CommTouch category service.
In an HTTPS connection, the Zyxel Device can extract the Server Name Indication
(SNI) from a client request, check if it matches a category in the CommTouch content
filter and then take appropriate action. The keyword match is for the domain name
only.
Drop connection when
HTTPS connection with SSL
V3 or previous version
Select this check box to have the Zyxel Device block HTTPS web pages using SSL V3 or
a previous version.
Content Filter Category
Service Timeout
Specify the allowable time period in seconds for accessing the external web filtering
service’s server.
Denied Access Message Enter a message to be displayed when content filter blocks access to a web page.
Use up to 127 characters (0-9a-zA-Z;/?:@&=+$\.-_!~*'()%,”). For example, “Access to
this web page is not allowed. Please contact the network administrator”.
It is also possible to leave this field blank if you have a URL specified in the Redirect URL
field. In this case if the content filter blocks access to a web page, the Zyxel Device
just opens the web page you specified without showing a denied access message.
Redirect URL Enter the URL of the web page to which you want to send users when their web
access is blocked by content filter. The web page you specify here opens in a new
frame below the denied access message.
Use “http://” or “https://” followed by up to 262 characters (0-9a-zA-Z;/?:@&=+$\.-
_!~*'()%). For example, http://192.168.1.17/blocked access.
Profile Management
Add Click Add to create a new content filter rule.
Edit Click Edit to make changes to a content filter rule.
Remove Click Remove the delete a content filter rule.
References Select an entry and click References to open a screen that shows which settings use
the entry. Click Refresh to update information on this screen.
# This column lists the index numbers of the content filter profile.
Name This column lists the names of the content filter profile rule.
Description This column lists the description of the content filter profile rule.
Reference This displays the number of times an Object Reference is used in a rule.
Action Click this icon to apply the content filter profile with a security policy.
Go to the Configuration > Security Policy > Policy Control screen to check the result.
Apply Click Apply to save your changes back to the Zyxel Device.
Reset Click Reset to return the screen to its last-saved settings.