To allow and deny access to Web applications and operations, you create policy rules in the Web Access Layer.
The following example demonstrates how to add a policy to control YouTube operations. With this policy, users will not be
able to post messages or upload videos in the YouTube application; all other operations will be allowed.
1. Launch the Web VPM.
2. Add a Web Access Layer. Name the layer YouTube Controls.
3. Click "destination" then "set"
4. Click "Add a new object" then "Application Name"
5. In the application list, scroll down and select the YouTube check box or search "youtube".
6. In the Name field, enter a descriptive name such as YouTube-App, click "Apply" then "Set".
7. Add an object to deny Post Messages and Upload Video operations on YouTube.
a. Click "destination" then "set"
b. Click "Add a new object" then "Application Operation"
c. Select the operations you want to block: Upload Videos and Post Messages.
d. Name this object Youtube-Operations.
e. Click "Apply".
8. Create a combined object.
a. Click "Add a new object" and select Combined Destination Object.
b. Select YouTube-App and "add a second list" then select "YouTube-Operations"
c. Name the combined object YouTube_app-op_controls
d. Click "Apply" then "Set"
9. Make sure the Action is set to Deny.
10. Save Policy.
Test the policy by verifying that you cannot access blocked Web applications.
1. Open a Web browser that is configured to use the Edge SWG (ProxySG) as a proxy. Make sure that you are not using the same
browser that you are currently using to access the Management Console.
2. Launch the application that you created a policy for. For example, if you created a policy to deny Facebook access,
you will see a corresponding ‘access denied’ or ‘web page not found’ error depending on how you have configured
the Deny functionality.
3. To customize the web page containing the error message displayed to users when they are denied access to a
URL, refer to the Exception Pages solution in the First Steps WebGuide.
Verify that you cannot perform blocked web operations and can perform operations that are allowed.
1. Open a Web browser that is configured to use the Edge SWG (ProxySG) as a proxy.
2. Launch the application you created a policy for. Make sure you can perform operations that are allowed and are
denied access to the blocked operations. For example, if you created a policy to block Post Message and Upload
Video operations in YouTube, go to YouTube and try to upload a file or post a comment; these operations should be
denied. Other operations, such as playing videos, should be allowed.