Manual Chapter : Common elements for access categorization and filtering

Applies To:

Show Versions Show Versions

BIG-IP APM

  • 14.0.0
Manual Chapter

Common elements for access categorization and filtering

  1. To configure a new URL filter, click one of these options.
    • Create
      button: Click to start with a URL filter that allows all categories.
    • Copy
      link: Click for an existing URL filter in the table to start with its settings.
  2. In the
    Name
    field, type a unique name for the URL filter.
  3. In the
    Description
    field, type any descriptive text.
  4. Click
    Finished
    .
    The screen redisplays. An Associated Categories table displays. It includes each URL category and the filtering action that is currently assigned to it. The table includes a Sub-Category column. Any URL categories that were added by administrators are subcategories within
    Custom Categories
  5. To indicate that you want a user to confirm that access is work-related or otherwise justified before obtaining access to the URLs in a category, select the categories or subcategories and click
    Confirm
    .
  6. To add URLs to the
    Associated URLs
    list:
    1. In the
      URL
      field, type a URL.
      You can type a well-formed URL that the system must match exactly or type a URL that includes globbing patterns (wildcards) for the system to match URLs.
    2. If you typed globbing patterns in the
      URL
      field, select the
      Glob Pattern Match
      check box .
    3. Click
      Add
      .
      The URL displays in the
      Associated URLs
      list.
    These are well-formed URLs:
    • https://www.siterequest.com/
    • http://www.siterequest.com:8080/
    • http://www.sitequest.com/docs/siterequest.pdf/
    • http://www.sitequest.com/products/application-guides/
    This URL
    *siterequest.[!comru]
    includes globbing patterns that match any URL that includes
    siterequest
    , except for
    siterequest.com
    or
    siterequest.ru
    .
    This URL
    *://siterequest.com/education/*
    includes globbing patterns that match any HTTP URL that includes
    siterequest.com/education
    , but that do not match any HTTPS URLs if Category Lookup specifies that the input is SNI or CN.Subject.
    For SNI or CN.Subject input, Category Lookup uses
    scheme
    :://
    host
    for matching, instead of matching the whole URL.
  7. To configure a new application filter, click one of these options.
    • Create
      button: Click to start with an application filter that allows access to all application families.
    • Copy
      link: Click for an existing application filter in the table to start with its settings.
  8. On the Main tab, click
    Access Policy
    Secure Web Gateway
    Overview
    .
    The Overview is available only on a BIG-IP system with an SWG subscription.
    The Overview screen displays.
  9. A URL database is available only on a BIG-IP system with an SWG subscription.
    A Confirm Box action in a per-request policy subroutine serves the purpose of enabling appropriate choices in a forward proxy (outbound) configuration. Currently, Access Policy Manager does not support a similar action for reverse proxy.
  10. From the
    Default Action
    list, retain the default value
    Block
    ; or, select an alternative:
    Allow
    or
    Confirm
    .
    If no action has been specified in a filter for this category, the URL Filter agent takes the branch for the default action.
To put a log setting into effect, assign it an access profile.