Showing results for 
Search instead for 
Did you mean: 
Level 9
Report Inappropriate Content
Message 1 of 2

MWG 6.9 Blocking URL pattern


     I have a question regarding MWG6.9.x and blocking malicious sites with a specific url pattern.  For the past few months we have been bombarded with malware comming from sites similiar to the below list.  All of the URL's have the regex format of "main.php\?(info|label)(=\S{22}==)".  I would love to be able to block access to these url's with the gateway, however my undertanding is that I can only filter on the domain name upto the '?' paramaters.

Anyone have any ideas on how to approach this?  Im sure I could do with with MWG7, however that is not an option for a few months.

1 Reply
Reliable Contributor asabban
Reliable Contributor
Report Inappropriate Content
Message 2 of 2

Re: MWG 6.9 Blocking URL pattern


you are right. However you can try using the HTTP Method Filter List:

2013-08-02 10_26_28-MWG6-140_ McAfee Web Gateway 6.9.6 build 15512.png

MWG 6 does not understand regular expressions. A string like this should offer some protection:




More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator