URL FILTERING GUIDE

URL FILTERING – Concept Overview

URL Filtering is a security feature that monitors and restricts user access to specific websites. This feature operates only when SSL Inspection is enabled, as it requires decrypted HTTPS traffic to inspect URLs effectively.

Administrators can define rules for blocking particular web pages, which are stored as URLREGEX entries. With SSL Inspection active, presenting a custom block page to users when they attempt to access restricted sites.

This mechanism provides controlled web access, enhances network security.

URL Filtering Workflow

1) User Request: A client device attempts to access a website via HTTP or HTTPS.For HTTP traffic, the request is sent in pld content.To enable URL filtering for HTTPS traffic, SSL interception is required. This involves decrypting the encrypted request at a secure proxy. The client device must have the trusted certificate pushed into it.

1) SSL Inspection: The request passes through the appliance with SSL Inspection enabled.The appliance intercepts and decrypts HTTPS traffic using a trusted certificate.

NOTE:
The process for pushing or installing this certificate on client devices is detailed in SSLInspection/Certification_push.md.

2) URL Filtering ON & OFF: To access the URL Filtering page, enable the SSL Inspection. If SSL is off, unable to access the URL Filtering.

3) Add Url: Admin can add the specific url to block the particular page through Add Url button in top right corner.

4) Activate Changes: It’s mandatory to give activate changes whenever the url is added.

5) URL Filtering Check: The URL is compared against the URL Filtering rules defined by administrators. Rules are stored as URLREGEX entries that match URLs to be blocked.

5) Decision Blocked: If the URL matches a block entry, then the request is intercepted and blocked by returning a custom block page to the user, informing them the site is restricted.