Whitelist for Apps and Syntax

iSpeed
iSpeed Posts: 110  Ally Member
First Comment Fifth Anniversary
edited April 2021 in Security

I have an ATP100 that I need working whitelist rules to allow apps the content filter seems to be blocking. Does the following work *.janeapp.com using as asterisk to allow all prefixes? IE can you use an asterisk to allow all prefixes to a domain IE *.microsoft.com

Could you give some examples of working whitelist rules for the content filter? Thanks.

I've had to turn off the content filter to get apps working for a client. I've looked in handbook and user manual without success.

Is the test against category filter the best way to check if a website will work?

image.png

How does the Trusted Web Sites in BPP differ from Content Filter Trusted Sites?

image.png


All Replies

  • Zyxel_Jerry
    Zyxel_Jerry Posts: 1,356  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 50 Answers 1000 Comments

    Hi @iSpeed

    I follow your settings to do the test.

    image001.png

    And it shows up the block message.

    block janeapp.png

    I allow the *.janeapp.com. But the Web Site do not display completely. Since there is some URL blocked by Content Filter.

    block.png

    Then we check the log on the device. It show up there is some URL still block by Content Filter that is not belong to “*janeapp.com”.

    blockwebsite.png

    Added the URL into the Trusted Web Site.

    2020-02-05 14_55_38-[atp100] (10.214.48.57) - .__ Welcome to ATP100 __..png

    Visit the Web Site again. It works fine.


    image0011.png

    An asterisk could works on the setting of Content Filter, however if there are some URL on the website that is not belong to the URL you allowed for, those URL need to be added into whitelist to make the website works.

    The “Trusted Web Sites” setting in the BPP profile will take effective on in the specified profile scope.

    The “Trusted/Forbidden Web Sites” in the content filter global setting will take effective in global scope (all content filter profiles will apply the trusted/forbidden web sites)

  • iSpeed
    iSpeed Posts: 110  Ally Member
    First Comment Fifth Anniversary

    Thanks Jerry, That makes sense, I'll add *.janeapp.net to the trusted sites. I didn't know to review log for troubleshooting.