If you are only doing your allow policies by groups, then in this sample you will need to create three rules for each group like this.
If user is in group facebook, then allow to facebook.com (Rule 1)
If user is in group news, then allow to url categories = news (Rule 2)
If user is in group messengers, then allow to url categories = messengers. (Rule 3)
thanks for the response.
i don't think this will solve my issue, because
i have about 28 groups and the final one will be the (domain users) group which contains all users.
so if a user is in three or four groups and the final one is the domain users group,, the MWG will apply the final policy which blocks all allowed policies above.
my customer had (WebSense) before and this product can do a combination between policies and apply the least restrictive policy which is the allowed one.
i searched in MWG to do the same but i didn't find anything regarding this purpose.
i need the best solution and the easiest way for management.
as you know in MWG 7 there is block action only,, i mean you can do a policy
If user is in group facebook, then block any url does not match to facebook.com (Rule 1)
If user is in group news, then block any url does not contain at least one in url categories = news (Rule 2)
the final one for domain users will block any url.
the first 2 rules will block every thing.
Many thanks Jont717,,
it's working well..