Additional Policies

The Configuration > Group Policy > Additional Policies page allows you to set additional policies that can be used as exceptions to the Default Policy and the Special Hours policy and which are executed as part of the Web Appliance’s policy filtering process.

Additional policies are added or modified in the Additional Policy editor. The additional policies that have been added are arranged by execution priority (enabled or disabled) and deleted on the Additional Policies page.

Note The Quarantined Machines policy is a default policy that cannot be deleted, turned off, or have its priority changed. This policy manages machines which have been blocked because they have been detected attempting to contact malware command and control services. This policy applies only to machines connecting from inside your network.

To add a policy:
1. Click Add.
  
  The Additional Policy editor is displayed.
2. Configure the new special policy on the seven tabs of the Additional Policy editor:
  - Selecting Users: specify the groups or users to which the additional policy will apply.
  - Configuring Site Categories: set overrides to both the Default and Special Hours policy’s handling of site categories.
  - Configuring Download Types: set overrides to the Default and Special Hours policy’s handling of download types.
  - Controlling Web Applications: configure how the additional policy differs from the default policy for specific web applications.
  - Configuring Tags: set what actions will be applied to tags.
  - Additional Options: set additional options, including sandboxing, quota minutes, and whether to disable logging for the new addional policy.
  - Name and Schedule: set the name of the new additional policy, schedule when it will apply, set whether it is enabled, and if it will be deactivated at a predefined date and time.
  Once created, the new policies appear in the Additional Policies list in the order they were created.
To edit an additional policy, click the name of the additional policy that you want to modify in the Policy Name column and make the required changes on the pages of the Additional Policy editor.
To set the order in which the special policies will be applied, click the up or down arrows in the Priority column beside the special policy for which you want to change the priority to move that policy up or down in the list, and click Save Order to save the priority order.

Optionally, click Reset Order to return to the last saved priority order.
To set the operational status for a policy, either click Turn On in the row of the policy that you want to enable, or click Turn Off in the row of the policy that you want to disable.

Note A warning icon will appear in the Active column if the time period for the policy is set to Special Hours and the special hours policy has been deactivated. This only happens if the Special Hours policy is deactivated after an Additional Policy was created based on the previous Special Hours policy. You cannot define a policy based on a Special Hours if Special Hours is not activated.
To remove a special policy, select the check box to the right of the additional policy that you want to remove, and click Delete.