See the rule that deny's access to the service?

[graemeevans]

Is there a way to show what rule triggers an access denied?

For example the WWW proxy is set to deny "HTTP URL contains cheese"
and deny http url contains crackers.

Is there a way to see if im going to www.cheese.com which rule / rules are blocking me?

From here i know its the http url contains cheese, however in our implementation there are many many rules / policies and i want to find out how to "un" filter some sections

Graeme

[ChrisH]

Sounds like a good feature request or possibly throw such information into a log file.

[labull]

I wouldn't mind the rule being in the log.

I don't know if I want my users to be able to see it. That may help them circumvent the rule.

[Pascal]

Interesting idea guys - would a feature like PureSight's in GateKeeper evaluation work for this?

[graemeevans]

I wouldnt mind where the data is stored.. logs seem the best place since i can time / user based find it. A tab in history would be nice though too.

Since gatekeeper is only allowed to me (network manager) and a few techs theres no problem with users seeing rules that trigger them.
To have the option shown to end users would be cool though sort of an: -

Code: Select all

Access Denied

This page was filtered due to the rule:

HTTP URL Contains "porn"

However as you say, this could allow brute force rule circumvention.

Graeme

[Pascal]

There is a certain advantage to having the option of displaying a response to the user. It can be used to communicate company policy and so forth - such as we do with PureSight already. (Per category blocking of web pages)