If multiple exceptions could apply, which takes precedence?

By default, Super Administrator exceptions take precedence over exceptions created by delegated administrators. So if a Super Administrator exception blocks a URL, and a delegated administrator exception permits the same URL, the request is blocked.

If, however, the Super Administrator configures an exception to allow delegated administrator overrides (see Overriding an exception), then the delegated administrator exception takes precedence. So if a Super Administrator exception blocks a URL, and a delegated administrator exception permits the same URL, the request is permitted.

If multiple equivalent exceptions could apply to a request (for example, if multiple Super Administrator exceptions include the same URL):

• Filtering Service checks for blocked exceptions first, so if there is a blocked exception and a permitted exception, the request is blocked.
• If there are multiple blocked exceptions, the first one found is applied.
• If there are no blocked exceptions and multiple permitted exceptions, the first permitted exception is applied.
• If there are multiple referer exceptions and no blocked exception, and one of the referer exceptions includes no specific URLs or regular expressions, the referer exception that lists the URL is applied.

After creating an exception, use the Test Filtering tool (see Test Filtering) to verify that client requests are filtered as expected.