The following are the options to exclude URLs:
Adding a URL under Approved/Blocked URLs serves as a global setting, which has the highest priority. It will take precedence over the Cloud Access Rules policies.
- Login to the TMWS web console.
- Go to Policies > Approved/Blocked URLs.
- Add the URLs under the different match modes.
- Web: Type the exact web address and all of its sub-sites if needed.
- Keyword: Type the keyword to match the URLs.
- String: Type the exact string match of the URL.
- Go to Web tab, then add the website URL that you would like to exclude.
You can copy and paste the exact URLs. TMWS will automatically trim http/https and will display the domain name of the website.
- Click the Add to Approved button to exclude the URL from TMWS policy scanning.
To create a Cloud Access Rule with a higher priority, do the steps below:
The Customized URL Category will serve as a "group" for the list of URLs you would like to use for a specific policy or exclusion.
To create the Customized URL Category, do the following:
- Login to TMWS console.
- Go to Policies > Objects > Customized URL Categories.
- Specify a Category name (e.g. AllowSomeSocialNetwork).
- Add the URLs under the different match modes.
- Web: Type the exact web address and all of its sub-sites if needed.
- Keyword: Type the keyword to match the URLs.
- String: Type the exact string match of the URL.
- Go to Web tab, then add the website URL that you would like to exclude.
You can copy and paste the exact URLs. TMWS will automatically trim http/https and will display the domain name of the website.
- Click Add, and then click Save.
- Go to Policies > Cloud Access Rules.
- Click Add.
- Specify a Rule name and Description (optional).
- Under Users/Groups, specify the target of the policy. By default, this is set to All.
User/Group exceptions can be added as well.
- Under Target Domains, specify the target domains. By default, this is set to All.
Domain exceptions can also be added.
- Under Gateways, specify the target gateways. By default, this is set to All.
- Under Traffic Types, specify the application categories, URL categories and cloud applications. By default, this is set to All.
The URL Category created from Step 1. Create a Customized URL Category can be found under URL Categories > Customized.
- Under Cloud Services, specify the cloud service filters as needed.
- Under Content Types, specify the MIME content types, file names, or true file types. By default, this is set to All.
- Under Schedule, specify or customize the time of effectivity of the policy. By default, this is set to Always.
- For Action, select either to Allow or Block.
- Under Security Templates, specify which template will be used:
- Threat Protection templates
- Data Loss Prevention Templates
- Click Save.
- Make sure to move the Allow Policy to the top of the list, or above the Block Policy (if there is) to have a higher priority.