Configuring Download Control policies

Screenshot 27 - Download Control Policies

Adding a Download Control Policy

To add a download control policy:

1. Click on WebSecurity Edition > Download Control Policies from the navigation pane.

2. Click on Add Policy.

Screenshot 28 - Add download control policy

3. Click on the General tab.

4. Provide new policy name and description in the Policy Name field and the Policy Description text box respectively.

Screenshot 29 - Add new download control policy: Download control tab

5. Click on the Download Control tab and click on the file type you want to control.

Screenshot 30 - Add new download control policy: Change Action dialog

6. From the Change Action dialog select the action to be performed from the Perform this action: drop down list. Available options are:

•

Allow

•	Block and Quarantine

•	Block and Delete

Screenshot 31 - Download control policies: Applies to tab

7. Click OK, select Applies Tab and specify the user(s), group(s) and/or IP(s) for whom the new policy applies. Repeat for all user(s), group(s) and/or IP(s) required.

NOTE 1: When adding a user, specify the username in the format DOMAIN\user. ISA Server authentication is used to validate the user name.

NOTE 2: When adding a group ISA Server authentication is used to validate the group name.

Screenshot 32 – Download control policies: Notification tab

8. Click on the Notifications tab. and select Notify the following administrators when the download content infringes this policy checkbox if required. Complete setup with the administrator’s notification email address and notification email text. Also provide the body text for the notification email in the Send the following notification to the administrators text box.

9. If you require the users to be notified when the policy you are creating is triggered, select the option Notify the user performing the download when the downloaded content infringes this policy checkbox and provide the notification email text.

NOTE: The notification is sent only if ISA Server authentication is possible and the user can be thus validated.

10. Complete new policy setup by clicking on Save Settings.

NOTE: Failing to click on Save Settings means that you will lose settings as soon as you leave the view to move to another section in GFI WebMonitor.

The policy you have just created will be listed in the main Download Control Policies view.

Editing a Download Control Policy

To edit a download control policy:

1. Click on WebSecurity Edition > Download Control Policies from the navigation pane.

2. Click on the edit icon next to the policy you want to edit.

3. Refer to ‘Adding a Download Control Policy’ section in this chapter for a description of the fields which can be edited.

4. Complete new policy setup by clicking on Save Settings

NOTE: Failing to click on Save Settings means that you will lose settings as soon as you leave the view to move to another section in GFI WebMonitor.

Disabling a Download Control Policy

To disable a download control policy:

1. Click on WebSecurity Edition > Download Control Policies from the navigation pane.

2. Uncheck the checkbox in the Enabled column for the policy you want to disable.

3. Complete disabling a download policy by clicking on Save Settings

NOTE: Failing to click on Save Settings means that you will lose settings as soon as you leave the view to move to another section in GFI WebMonitor.

Enabling a Download Control Policy

To enable a previously disabled download control policy:

1. Click on WebSecurity Edition > Download Control Policies from the navigation pane.

2. Check the checkbox in the Enabled column for the policy you want to disable.

3. Complete enabling a download policy by clicking on Save Settings

NOTE: Failing to click on Save Settings means that you will lose settings as soon as you leave the view to move to another section in GFI WebMonitor.

Delete a Download Control Policy

To delete a download control policy:

1. Click on WebSecurity Edition > Download Control Policies from the navigation pane.

2. Click on the delete icon next to the policy you want to delete.

3. Complete deleting a download policy by clicking on Save Settings

NOTE: Failing to click on Save Settings means that you will lose settings as soon as you leave the view to move to another section in GFI WebMonitor.

Default Download Control Policy

GFI WebMonitor - WebSecurity Edition ships with a default download control policy which is configured to apply to all users. The policy name is listed as ‘Default Download Control Policy’.

This policy can be edited, however it cannot be disabled or deleted. If you want to edit the default policy, refer to the ‘Editing a Download Control Policy’ section in this chapter for information related to editing download control policies.

NOTE 1: All user-created download control policies takes precedence over the default download control policy.

NOTE 2: Certain fields in the default policy cannot be edited. These include Policy Name, Policy Description and fields in the Applies To tab.

Adding Content-types

GFI WebMonitor - WebSecurity Edition includes a large number of common file types. To add a file type which is not in the predefined list:

1. Click on WebSecurity Edition > Download Control Policies from the navigation pane.

2. Click on Add Policy, select Download Control tab and click on Add Content-type.

 

Screenshot 33 - Add new content type

3. Key in the content-type in the Content-Type field in the format type/subtype and click on Add.

4. Complete keying in a new contact type by clicking on Save Settings

NOTE 1: Files for user added content-types are not real file type checked as is the case with preconfigured file types.

NOTE 2: Failing to click on Save Settings means that you will lose settings as soon as you leave the view to move to another section in GFI WebMonitor.