cancel
Showing results for 
Search instead for 
Did you mean: 
luizricardo
Level 9

Rule Set problem and best practices

Hi guys!

I tried configuring my MWG7 with the following rule sets:

rules filtering hellp.png

I was writing some addresses in URL WhiteList "Internet_Liberada" like twitter.com when the SocialNetworking was blocked category and I can't access the site. But when I unmark the second rule the access is occuring good.

What is wrong ? Because the rule set process will Stop and go to another Rule Set when one rule is matched but in this case it's not did and the traffic it's denied.

Someone have a paper with the best practices to configure MWG ?

Best,

Luiz Ricardo

0 Kudos
3 Replies
mannny
Level 8

Re: Rule Set problem and best practices

If you use      *.twitter.com*      I thnk it will work.

This is based on your statement that you are using URL and if you enter twitter.com it will not match the request for http://www.twitter.com and even http://www.twitter.com/some/path

I think the syntax for URL uses regex to match the combo. You can however try using URL.host instead of URL as that will only match the host portion of the URL i.e. www.twitter.com and in that case you can create a list of entries with the host portion of the URL and avoid regex and save valuable CPU cycles.

Regards

Mannny

luizricardo
Level 9

Re: Rule Set problem and best practices

I tried use Global Whitelist and worked fine but i think I did like you said *.twitter.com* . However I'll collect a host portion of the URL and avoid regex like you said.

Do you know some best practices for operating MWG 7

Thanks a lot!

0 Kudos
mannny
Level 8

Re: Rule Set problem and best practices

If you are a McAfee Partner or if you can get access to this link http://mcafee.netexam.com/ there is a McAfee Web Gateway Video tutorial which is an excellent start. I loved and enjoyed the passionate presentation / training. It was very helpful in building up the product confidence. Saying that, video for McAfee Mail Gateway wasn't impressive at all and I closed it in less than an hour.

Hope this helps.

Regards

Manoj

0 Kudos