6.2	Download Control Policies

The Download Control Policies node allows you to create policies per user(s), group(s) and/or IP(s) to manage file downloads based on file types. If the download of a file triggers a policy, GFI WebMonitor then uses the configured Download Control policy to determine what action to take. This may be one of the following actions:

•	Allow the file to be downloaded by user(s), group(s) and/or IP(s)

•	Block the file from being downloaded by user(s), group(s) and/or IP(s) and quarantine the downloaded file

•	Block the file from being downloaded by user(s), group(s) and/or IP(s) and delete the downloaded file

NOTE: For allowed downloads, GFI WebMonitor then applies the configured Virus Scanning Policies and determines its virus scanning options.

Screenshot 39 - Download Control Policies view

6.2.1

Adding a Download Control Policy

To add a Download Control Policy:

1. Navigate to WebSecurity Edition ► Download Control Policies.

2. Click Add Policy.

Screenshot 40 - Download Control Policies: General tab

3. Select the General tab.

4. Key in a new policy name and description in the Policy Name field and the Policy Description text boxes respectively.

Screenshot 41 - Download Control Policies: Download Control tab

5. Select the Download Control tab.

Screenshot 42 - Adding a new content type dialog

6. Click any File Type hyperlink from the list to display the Change Action dialog and configure the actions to be taken for that file type.

7. From the Perform this action drop-down list select the applicable action to be taken. The available options are:

•

Allow

•	Block and Quarantine

•	Block and Delete

8. Click OK to apply the action.

9. (Optional) Click the Add Content-type button to create a new definition. For more information, refer to the Adding New Content-types section in this chapter.

Screenshot 43 - Download Control Policies: Applies To tab

10. Select the Applies To tab and specify the User(s), Group(s) and/or IP(s) for whom the new policy applies and click Add. Repeat for all the required user(s), group(s) and/or IP(s).

NOTE: When adding a user, specify the username in the format DOMAIN\user.

Screenshot 44 - Download Control Policies: Notifications tab

11. (Optional) Select the Notifications tab and select the Notify the following administrators when the downloaded content infringes this policy checkbox to enable notification and define the administrator’s notification email address and provide the body text of the notification email.

12. (Optional) Select the Notify the user performing the download when the downloaded content infringes this policy checkbox to enable notification and provide the body text of the notification email.

13. Click Save Settings to finalize creating a new policy. The new policy will now be listed in the main Download Control Policies view.

NOTE: Failing to click Save Settings means that you will lose settings as soon as you leave the view to move to another section in GFI WebMonitor.

6.2.2

Editing a Download Control Policy

To edit a Download Control Policy:

1. Navigate to WebSecurity Edition ► Download Control Policies.

2. Click the Edit icon next to the policy you want to edit.

NOTE: For more information, refer to the Adding a Download Control Policy section in this chapter.

3. Click Save Settings to finalize editing a policy.

NOTE: Failing to click Save Settings means that you will lose settings as soon as you leave the view to move to another section in GFI WebMonitor.

6.2.3

Enabling/disabling a Download Control Policy

To enable or disable a Download Control Policy:

1. Navigate to WebSecurity Edition ► Download Control Policies.

2. Check or uncheck the checkbox from the Enabled column for the policy you want to enable or disable.

3. Click Save Settings to finalize enabling or disabling a policy.

NOTE: Failing to click Save Settings means that you will lose settings as soon as you leave the view to move to another section in GFI WebMonitor.

6.2.4

Deleting a Download Control Policy

To delete a Download Control Policy:

1. Navigate to WebSecurity Edition ► Download Control Policies.

2. Click the delete icon next to the policy you want to delete.

3. Click Save Settings to finalize deleting a policy.

NOTE: Failing to click Save Settings means that you will lose settings as soon as you leave the view to move to another section in GFI WebMonitor.

6.2.5

Default Download Control Policy

GFI WebMonitor - WebSecurity Edition ships with a default download control policy, which is configured to apply to all users. The policy name is listed as Default Download Control Policy.

This policy can be edited but it cannot be disabled or deleted. Refer to the Editing a Download Control Policy section in this chapter for information related to editing download control policies.

IMPORTANT: All added Download Control Policies take priority over the Default Download Control Policy.

NOTE: Certain fields in the default policy cannot be edited. These include Policy Name, Policy Description and fields in the Applies To tab.

6.2.6

Adding New Content-types

The New Content-type dialog allows you to create new definitions for file types, which are not yet in the predefined list.

Screenshot 45 - Add new content type dialog

To create a new content-type:

1. Select the Download Control tab and click Add Content-type to view the New Content-type dialog.

2. Key in the content-type in the Content-Type field in the format type/subtype.

3. (Optional) Provide a description for the file type in the Description field.

4. Click Add.

5. Click Save Settings to finalize creating a new content-type.

NOTE: Failing to click Save Settings means that you will lose settings as soon as you leave the view to move to another section in GFI WebMonitor.