Setup access rule problem

[mborroni]

Hi all.
I'm trying to set up an access rule to restrict access to a list of sites (windows update, office 365 and some others).
To try I created a new rule with 'who', 'where' and 'when' tab set to allow to everyone (checked the check box)
1- I created a new rule and used the 'Allowed sites' category in the 'What' tab of the rule (other tabs was set to allow everything): doesn' work;
2- I created a new list of sites (in Control Panel\Data: download.microsoft.com download.windowsupdate.com update.microsoft.com) used to 'feed' the manual classifier for a new category, then used the new category within the 'what' tab of the rule: doesn't work;
the rule doesn't work even if I set 'pattern match' nor 'exact match' in the list edit form
3- I typed in the list of allowed sites (same as above) directly in the 'what' tab of the rule: now it works.

It seems that site lists and/or categories doesn't work correctly,
what am I missing?

Thanks,
Matteo

[adrien]

Hi Matteo

The "allowed sites" category is included as an example, and I'm not sure it's populated by default, you'd need a manual classifier rule to link sites or a list of sites to that category.

when creating lists of sites for use by the Manual Classifier, the content of the data list depends on whether the classifier is matching on URL or site. If URL, the full URL is checked, e.g. http://some.site.com/something, if Site, then only the site part of the URL is checked (in this example it would be some.site.com).

If however you check on the site from within the access control rule (e.g. rather than a category which comes from sites or list(s) thereof), then you don't use wild-cards, if you select also include sub-items, it will match on sub-domains.

Regards

Adrien

[mborroni]

Hello Adrien,
I found my mistake: in my list of sites I was typing something like *.windowsupdate.com (using pattern matching) so urls like http:\\windowsupdate.com\... was rejected due to the missing '.' in front of windowsupdate, I replaced it with *windowsupdate.com and everything is working fine now.
Thank you,
regards,

Matteo