Supplement or selectively override category and reputation-based URL filtering

This task allows you to use Security Intelligence URL lists and feeds to supplement or create exceptions to your category and reputation-based URL filtering rules in access control or QoS policies.

In access control or QoS rules, you can use Security Intelligence URL lists and feeds to supplement, or to specify exceptions to, your category and reputation-based URL filtering rules.

Important! If the list or feed you are configuring in this procedure contains exceptions to category- or reputation-based rules, put this rule above those rules in the rule order.

In SSL rules, use distinguished name conditions to configure parallel behavior.

Before you begin

Configure URL filtering using category and reputation. Refer to Configure URL conditions.
Understand important best practices for manual URL filtering. Refer to Best practices for URL filtering and Manual URL filtering options.
Configure one or more Security Intelligence objects (lists or feeds) containing the URLs that you want to use for manual filtering. Refer to Custom security intelligence lists and feeds.

Follow these steps to supplement or selectively override category and reputation-based URL filtering:

Procedure

Step 1	Navigate to the access control or QoS policy in which you will define the rule.
Step 2	Create or edit the rule in which you will add the new condition: If you are supplementing a category- or reputation-based URL filtering rule, edit the existing rule. If you are overriding or creating exceptions to a category- or reputation-based URL filtering rule, create a new rule.
Step 3	Select the list or feed you created as the destination URL criteria.
Step 4	Save the rule.