Endpoint Admission Defense Help >> Operation Guide >> Endpoint Access Control >> URL Control Policy

URL Control Policy

A URL control can reference domain URL groups and IP URL groups. A URL control policy can be applied to an iNode client in a security policy. Then, the iNode client can permit or deny the access of a terminal user according to the URL control policy.

Functions

• Add/Modify URL Control Policy

Operation Procedure

1. Enter the URL control policy configuration page.
   Approach 1: Click the User tab, and click the User Security Policy link to enter the User Security Policy homepage. On the homepage, click the Endpoint Access Control link, and click URL Control Policy.
   Approach 2: Click the User tab. select User Security Policy > Endpoint Access Control > URL Control Policy from the navigation tree.
2. Click Add, or click the link for a URL control policy.
3. Set the basic information for the URL control policy, including name, domain URL default action, IP URL default action, service group, and description. The domain URL default action can be Deny or Permit. Deny means to deny the access to a domain URL that does not match any item in the domain URL group list. Permit means to permit such an access. The IP URL default action is similar to the domain URL default action.
4. Click Add on the domain URL group list. The window for adding a URL group appears. Select an existing domain URL group and select an action for the group. The action can be Deny or Permit. Permit means to permit the access of the terminal users to the URLs matching the URL group. Deny means to deny the access of terminal users to the URLs matching the URL group. Click OK. You can add more domain URL groups in the same way. When multiple domain URL groups exist, you can click the or icon in the Priority column for a group to adjust the priority of the group. For more information about configuring domain URL groups, see Domain URL Group.
5. Click Add on the IP URL group list. On the page for adding groups that appears, select an existing IP URL group and select an action. The action can be Deny or Permit. Deny means to deny the access of terminal users to the URLs matching the IP URL group. Permit means to permit the access of terminal users to the URLs matching the IP URL group. Click OK. You can add more IP URL groups in the same way. When more than one IP URL groups exist, you can click the or link in the Priority column to adjust the priority of the group. For more information about configuring IP URL groups, see IP URL Group.
6. Click OK.

Precautions

• A URL control policy name cannot be the same as any existing URL control policy.
• When you modify a URL control policy, you cannot modify the name and service group of the URL control policy.
• Delete URL Control Policy

Operation Procedure

1. Enter the URL control policy configuration page.
   Approach 1: Click the User tab, and click the User Security Policy link to enter the User Security Policy homepage. On the homepage, click the Endpoint Access Control link, and then click the URL Control Policy link.
   Approach 2: Click the User tab, and select User Security Policy > Endpoint Access Control > URL Control Policy from the navigation tree.
2. Click the link for the URL control policy to be deleted. A confirmation dialog box appears.
3. Click OK.

Precautions

• You cannot delete a URL control policy that is being used by a security policy.

Related Topics

• Domain URL Group
• IP URL Group
• Security Policy