6.2	Download Control policies

GFI WebMonitor identifies the real file type of the file being downloaded and then applies Download Control Policies to determine what action to take. This may be one of the following actions:

•	Allow the file to be downloaded

•	Block the file from being downloaded and quarantine the file URL

•	Block the file from being downloaded and delete all related URLs

For allowed downloads, GFI WebMonitor then applies the configured Virus Scanning Policies and determines its virus scanning options.

Screenshot 34 - Download Control Policies

6.2.1

Adding a new Download Control Policy

To add a download control policy:

1. Click on WebSecurity Edition ► Download Control Policies from the navigation bar.

2. Click on Add Policy.

3. In the General tab provide a new policy name and description in the Policy Name field and the Policy Description text box respectively.

Screenshot 35 - Add new download control policy: Download control tab

4. Click on the Download Control tab to configure the actions to be taken on the various file types.

Screenshot 36 - Add new download control policy: Add new content type

5. To add a new file type select Add Content-Type button and enter the new Content-Type and a Description. Click Add.

Screenshot 37 - Add new download control policy: Change Action dialog

6. Click on any file type from the list to display the Change Action dialog and configure the actions to be taken for that file type. From the Perform this action: drop down list select the applicable action to be taken. The available options are:

•

Allow

•	Block and Quarantine

•	Block and Delete

Click OK to apply the action.

Screenshot 38 - Download control policies: Applies to tab

7. From the Applies To tab, specify the user(s), group(s) and/or IP(s) for whom the new policy applies. Repeat for all user(s), group(s) and/or IP(s) required.

NOTE: When adding a user, specify the username in the format DOMAIN\user.

Screenshot 39 – Download control policies: Notification tab

8. Click on the Notifications tab and select Notify the following administrators when the download content infringes this policy checkbox if required. Enter the administrator’s email address and notification email text, by updating the text for the notification email in the Send the following notification to the administrators text box.

9. If you require the users to be notified when the policy you are creating is breached, select the option Notify the user performing the download when the downloaded content infringes this policy checkbox and provide the notification email text.

10. Complete the new policy setup by clicking on Save Settings.

The policy created will be listed in the main Download Control Policies view.

6.2.2

Editing a Download Control Policy

To edit a download control policy:

1. Click on WebSecurity Edition ► Download Control Policies from the navigation bar.

2. Click on the edit icon next to the policy you want to edit.

3. Refer to Adding a new Download Control Policy section in this chapter for a description of the fields which can be edited.

4. Complete new policy setup by clicking on Save Settings

6.2.3

Disable a Download Control Policy

To disable a download control policy:

1. Click WebSecurity Edition ► Download Control Policies from the navigation bar.

2. Uncheck the checkbox in the Enabled column for the policy you want to disable.

3. Complete disabling a download policy by clicking on Save Settings

6.2.4

Enable a Download Control Policy

To enable a previously disabled download control policy:

1. Click WebSecurity Edition ► Download Control Policies from the navigation bar.

2. Check the checkbox in the Enabled column for the policy you want to disable.

3. Complete enabling a download policy by clicking on Save Settings

6.2.5

Delete a Download Control Policy

To delete a download control policy:

1. Click WebSecurity Edition ► Download Control Policies from the navigation bar.

2. Click delete icon next to the policy you want to delete.

3. Complete deleting a download policy by clicking on Save Settings

6.2.6

Default Download Control Policy

GFI WebMonitor - WebSecurity Edition ships with a default download control policy, which is configured to apply to all users. The policy name is listed as Default Download Control Policy.

This policy can be edited, however it cannot be disabled or deleted. If you want to edit the default policy, refer to the Editing a Download Control Policy section in this chapter for information related to editing download control policies.

NOTE: All user-created download control policies takes precedence over the default download control policy.

NOTE: Certain fields in the default policy cannot be edited. These include Policy Name, Policy Description and fields in the Applies To tab.

6.2.7

Adding Content-types

GFI WebMonitor - WebSecurity Edition includes a large number of common file types. To add a file type which is not in the predefined list:

1. Click on WebSecurity Edition ► Download Control Policies from the navigation bar.

2. Click on Add Policy, select Download Control tab and click on Add Content-type.

Screenshot 40 - Add new content type

3. Key in the content-type in the Content-Type field in the format type/subtype and click on Add.

4. Complete keying in a new contact type by clicking on Save Settings.

NOTE: Files for user added content-types are not real file types, as is the case with preconfigured file types.