Knowledgebase
Creating a White List URL Filter to Block all URL’s Except for Required Sites on Vigor3200
Posted by on 23 January 2012 10:23 AM

 

Here we will show how to configure the URL Content Filter to block all URL’s except for the required URL on a Vigor3200. For example you may only want users to access Microsoft web sites only and not allow access to other web sites.

In our example we want to restrict a group of users (IP address range 192.168.1.50 to 192.168.1.59) to only access certain web sites. E.g.

 

Other users will be able to access all web sites without restriction.

You should note that some web sites may require access to a secondary web site to allow access to the web site, so this secondary site also needs to be added to the URL list. For example www.twitter.com also requires the keyword “a2.twimg.com”to also be entered.

 

 

There are four steps required as described below:

Step1: Create Keyword Objects

Go toObjects Setting >> Keyword Object configuration menu

Click on the first index and enter required URL keywords as shown in the diagram below: 


Firewall/URL/5/firewall_URL_6.JPG

Step2: Create URL Profile

Go toObjects Setting >> Keyword Group configuration menu

Click on the first index and enter required keyword Objects to the keyword Group as shown in the diagram below: 

Firewall/URL/5/firewall_URL_6.JPG

Step3: Create URL Profile

Here we link the URL Content Filter Profile to the Keyword group created in step 2.


Firewall/URL/5/firewall_URL_7.JPG

Step 4: Configure Firewall rule

Here we enter the range of IP addresses that this URL filter will apply to.

The IP address range will be from 192.168.1.50 to 192.168.59

Enter the details as highlighted below.



Firewall/URL/5/firewall_URL_8.JPG

Once configured, a message will be displayed if users in the restricted IP range try to access blocked web sites as shown below:


/Firewall/URL/5/firewall_URL_9.JPG

This message can be customized if required in “CSM>>URL Content Filter Profile” configuration menu.

(2 vote(s))
Helpful
Not helpful

Comments (0)