There are two types of URL and certificate categories: customized categories (entered manually by the administrator) and dynamic categories. The URL database provider that provides dynamic URL categories is Stormshield Network by default.
This module offers the creation of customized URL or certificate categories, and groups that may contain customized and dynamic categories. This module also allows entering the URL database provider.
For a given category, e.g. “banks”, which contains the most frequently visited URLs of banks, a rule can be created in URL filtering (Security policy\URL filtering) to block access.
Therefore, when you attempt to connect to your bank’s website, a block page will appear, with an error message. (See the module Notifications\Block messages\HTTP block page).
In filter policies, it is better to use dynamic categories provided by URL databases, as they are richer and perform better than customized URL lists.
This module consists of 4 tabs:
- URL: Allows grouping URLs by category (e.g.: “shopping”, “pornography”, “videogames”). Each of these categories groups together a certain number of website URLs, which may be blocked or allowed, depending on the desired action.
- Certificate (CN): Allows creating categories to recognize the certificates assigned to secure websites, for use in SSL filtering.
- Groups of categories: Offers the creation of URL or certificate category groups from the customized or dynamic categories (URL database).
- URL database: Depending on le type of option subscribed, the available URL lists are updated by different providers (Stormshield Network or Stormshield Network Extended Web). Stormshield Network’s URL lists are offered by default.
To find out which characters are allowed or prohibited in various fields, please refer to the section Allowed names.