Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Adding URLs to the White or Black List in InterScan Web Security Virtual Appliance (IWSVA)

    • Updated:
    • 31 Jul 2018
    • Product/Version:
    • InterScan Web Security Virtual Appliance 6.5
    • Platform:
    • Virtual Appliance すべて
Summary

You want to know how to register URLs to be added to the whitelist or blacklist in InterScan Web Security Virtual Appliance (IWSVA). Learn the 3 ways to add URLS and know their differences.

Details
Public

The following is the IWSVA menu for URL registration:

  • [HTTP] > [URL Access Control] > [Global URL Blocking]
  • [HTTP] > [[URL Access Control] > [Global Trusted URLs]
  • [HTTP] > [Configuration] > [Approved Lists]
  • [HTTP] > [Configuration] > [Custom Categories]

You can use "*" (zero or more characters) and"?" (single character) as the wildcard for URL. Also, "*" is automatically set in "Web site" and "URL keyword".

The following are the different ways to register URLs:

If adding URL has no "*", "*" is automatically set. In addition, "@" is automatically added to the front of domain name to be targeted sub domain as well.

For example, if you add the following URLs:

  • example.com
  • example.com*

The following URL should be registered:

  • @example.com*

Matching URLs:

  • http://example.com/folder/index.html
  • http://www.example.com/folder/index.html

However, there is an exception rule. If adding URL has / (trailing slash), it is treated as completed URL and just registered without without "*".

For example, if you add the following URLs:

  • example.com/folder

The following is registered:

  • @example.com/folder

In this case, accessing "example.com/folder/index.html" will not match "@example.com/folder". To include a file under the directory, "*" should be added at the end of URL such as "example.com/folder*".

If adding URL has no "*" in front and behind of URL, "*" is automatically added.

For example, if you add the following URLs:

  • example
  • *example
  • example*
  • *example*

The following URL is registered:

  • *example*

Matching URLs:

  • http://example.com/folder/index.html
  • http://www.example.com/folder/index.html
  • http://sub.domain.test/example/index.html

The URL is registered.

For example, if you add the following URL:

  • example.com/folder/index.html

The following URL is registered:

  • example.com/folder/index.html

Matching URL:

  • http://example.com/folder/index.html

Appendix

  • Question: How do you add a URL without sub domain?

    Answer: Add the URL including "*" at the end of URL in "String".

  • Question: How do you add a URL within "?" URL as part of a path?

    Answer: Change "?" to "%3f" in order to treat "?" as not a wildcard.

  • Question: How do you add a URL for an HTTPS site?

    Answer: It depends on IWSVA's configuration.

  • If HTTPS decryption policy is enabled, the path part of a URL can be checked like an HTTP.
  • If HTTPS decryption policy is disabled, IWSVA can only check FQDN.

    For example, if you are accesing the URL, https://example.com/folder/index.html, the only the example.com part can be checked without "folder/index.html". You should focus on FQDN of URL for registration.

Premium
Internal
Rating:
Category:
Configure
Solution Id:
1120478
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.