Configuring filtering settings

Use the Settings > General > Filtering page to establish basic settings for how Internet requests are handled.

Use the General Filtering section to determine how policies are applied to users when multiple group policies could apply; specify keyword search options; and set password override, account override, continue, and quota session behavior.

Steps

  1. To determine how user requests are handled when multiple group policies apply, mark or clear Use most restrictive group policy (see Enforcement order).
    • When the option is selected, the policy that applies the most restrictive action is used. In other words, if one applicable group policy blocks access to a category and another permits access, the user’s request for a site in that category is blocked.
    • When the option is not selected, the most permissive setting is used.
  2. Select one of the following Keyword search options (see Keyword-based policy enforcement).
    CGI only

    Blocks sites when keywords appear in CGI query strings (after the “?” in a Web address).

    Example: search.yahoo.com/search?p=test

    Filtering Service does not search for keywords before the “?” when this is selected.
    URL only Blocks sites when keywords appear in the URL. If the requested address contains a CGI query string, Filtering Service searches for keywords up to the “?”.
    URL and CGI Blocks sites when keywords appear anywhere in the address. If a CGI query string is present, Filtering Service searches for keywords both before and after the “?”.
    Disable keyword blocking Use with caution. Disable keyword blocking turns off all keyword blocking, even if Block keywords is selected in a category filter.
  3. In the Password override timeout field, enter the maximum number of seconds (up to 3600, default 60) that a user can access sites in all categories after selecting password override (see Password override).
  4. In the Continue timeout field, enter the maximum time in seconds (up to 3600, default 60) that a user who clicks Continue can access sites in categories governed by the Confirm action (see Actions).
  5. In the Account override timeout field, enter the maximum time in minutes (up to 3600, default 5) that a user is filtered by the policy assigned to the override account (see Account override).
  6. In the Quota session length field, enter the interval (up to 60 minutes, default 10) during which users can visit sites in quota-limited categories (see Using quota time to limit Internet access).

    A session begins when the user clicks the Use Quota Time button.

  7. Enter the Default quota time per day (up to 1440 minutes, default 60) for all users.

    To change the quota time for individual users, go to the Policies > Clients page.

    As you make changes to the quota session length and the default quota time per day, the Default quota sessions per day is calculated and displayed.

    Note: The Password Override and Account Override options assigned to clients and available for category block pages are not available for cloud apps block pages.