So there's a particular website I don't want a pair of hosts (which I've grouped into a network group) to access. I've bodged a solution by creating a new web filter profile which applies to that network group and to which a policy applies and to which a filter action applies. But goodness - that seemed a long winded way to go about it? In addition, and this is really the crux of the matter because I didn't mind it being long-winded - I had to clone my existing base policy and then modify it to also block this particular website, because if I didn't, the new policy which ONLY blocked this particular website meant that the base policy did not apply! I'm sure I must be missing something obvious. At the moment things are working how I want them to...but I think I've got a lot of redundant policy because of how I've done it. Hope my explanation above makes sense.
↧