Managing exceptions

Use the Policy Management > Exceptions page to review, edit, or delete existing exceptions, or to add new exceptions.

Super Administrators see all exceptions, regardless of the role in which they were created. Delegated administrators see all exceptions that affect their current role. For more information about how exceptions are ordered in the list, see How are exceptions organized?.

  • If a single URL or regular expression is blocked or permitted by the exception, the URL or expression is listed. Otherwise, click the link in the URLs column to see a complete list of affected URLs.

    If the exception is defined with referer information and no URLs or regular expressions were specified in the exception, text in this column explains that access to all URLs is permitted if accessed from a referer site.

  • If one or more approved referers is included in the exception, the Referer column contains:
    • The URL of the approved referer when only one is listed.
    • A link to a list of the referer URLs assigned to the exception.
  • If the exception affects:
    • A single client, the client’s IP address, address range, or display name is listed.
    • A single role, the role name is displayed in the format “Role [Role_Name]”
    • All clients in all roles, the word “Global” is shown.

      Global exceptions that can be overridden by delegated administrators are marked with an icon in the Clients column (see Overriding an exception).

    • Multiple, specific clients, the number of clients is shown. Click the link to see a complete list of affected clients.

The exceptions list also shows:

Column Description
Type

Displays an icon to indicate whether URLs in the exception are:

  • Blocked ()
  • Permitted ()

    (Hover over for “Permitted by Referer”.)

  • Permitted with security override disabled ()

    (Hover over for “Permitted by referer, even when security risks are found”.)

Expires Indicates whether or not the exception has an expiration date, and if so, displays the date.
Active Shows whether the exception is currently being enforced (Active) or not (Inactive).
Last Modified Shows the date that the exception was last edited.

Use the Filter drop-down list to display only exceptions with specified characteristics. The following filters are available:

Filter Description
Permitted Exceptions that permit URLs.
Blocked Exceptions that block URLs.
Active Exceptions currently being enforced.
Inactive Exceptions not currently used.
Will Expire Exceptions for which an expiration date is specified.
Expired Exceptions that are inactive because their expiration date has passed.
Never Expires Exceptions set to remain active indefinitely.
Global Exceptions that apply to all clients in all roles.
All Clients in a Role Exceptions that apply to all clients in a specific delegated administration role (including the Super Administrator role).
Specific Clients Exceptions that apply to one or more specific clients.

You can also use the Search fields to limit which exceptions are displayed:

  1. Use the drop-down list to indicate which table columns you want to search.
  2. Enter all or part of the string you want to identify.
  3. Click Search.
  4. To return to your previous view, click Clear Search Results.

To create a new exception, click Add. See Adding or editing an exception for instructions.

To edit an existing exception, click the exception name, or mark the check box next to one or more exceptions, and then click Edit. See Adding or editing an exception or Editing multiple exceptions at the same time for instructions.

To remove an exception, mark the check box next to the exception name, and then click Delete.