The following is the IWSVA menu for URL registration:
- [HTTP] > [URL Access Control] > [Global URL Blocking]
- [HTTP] > [[URL Access Control] > [Global Trusted URLs]
- [HTTP] > [Configuration] > [Approved Lists]
- [HTTP] > [Configuration] > [Custom Categories]
You can use "*" (zero or more characters) and"?" (single character) as the wildcard for URL. Also, "*" is automatically set in "Web site" and "URL keyword".
The following are the different ways to register URLs:
If adding URL has no "*", "*" is automatically set. In addition, "@" is automatically added to the front of domain name to be targeted sub domain as well.
For example, if you add the following URLs:
- example.com
- example.com*
The following URL should be registered:
- @example.com*
Matching URLs:
- http://example.com/folder/index.html
- http://www.example.com/folder/index.html
However, there is an exception rule. If adding URL has / (trailing slash), it is treated as completed URL and just registered without without "*".
For example, if you add the following URLs:
- example.com/folder
The following is registered:
- @example.com/folder
In this case, accessing "example.com/folder/index.html" will not match "@example.com/folder". To include a file under the directory, "*" should be added at the end of URL such as "example.com/folder*".
If adding URL has no "*" in front and behind of URL, "*" is automatically added.
For example, if you add the following URLs:
- example
- *example
- example*
- *example*
The following URL is registered:
- *example*
Matching URLs:
- http://example.com/folder/index.html
- http://www.example.com/folder/index.html
- http://sub.domain.test/example/index.html
The URL is registered.
For example, if you add the following URL:
- example.com/folder/index.html
The following URL is registered:
- example.com/folder/index.html
Matching URL:
- http://example.com/folder/index.html
Appendix
-
Question: How do you add a URL without sub domain?
Answer: Add the URL including "*" at the end of URL in "String".
-
Question: How do you add a URL within "?" URL as part of a path?
Answer: Change "?" to "%3f" in order to treat "?" as not a wildcard.
-
Question: How do you add a URL for an HTTPS site?
Answer: It depends on IWSVA's configuration.
- If HTTPS decryption policy is enabled, the path part of a URL can be checked like an HTTP.
-
If HTTPS decryption policy is disabled, IWSVA can only check FQDN.
For example, if you are accesing the URL, https://example.com/folder/index.html, the only the example.com part can be checked without "folder/index.html". You should focus on FQDN of URL for registration.