Information in this article applies to Safetica ONE 10 or older.
In this article, you will find info about:
- Application and Web Control in WebSafetica
- Sample Web Control scenarios
- Sample Application Control scenarios
Application and Web Control in WebSafetica
Since Safetica 9.8, Application and Web Control can only be managed in WebSafetica > Policies > Websites or WebSafetica > Policies > Applications.
In Applications, you can easily define policies for blocking individual applications or application categories across the entire company.
In Websites, you can block access to specific websites or web categories. You can also block all websites and allow access to a specified list of URLs.
When creating policies, there are two simple rules to follow:
- Policies are evaluated from top to bottom.
- The first policy to match the scenario is applied, and the evaluation is stopped.
This means that rules and exceptions for specific endpoints, users, or groups should be placed to the top of the list, while company-wide "catch-all" rules should be at the bottom of the list.
Sample Web Control scenarios
Example 1: Block all potentially dangerous website categories for all users except the management group.
Example 2: The computers and users from the WorkShop group should not have access to websites other than those in the Intranet category.
Sample Application Control scenario
Example 1: Block Alternative web browsers, Games, Keyloggers, and Miners for the whole company. Allow Games for the management group.
Example 2: Block IM applications excluding MS Teams.
When creating a policy that will block all IM applications except MS Teams, you can either:
- Assign MS Teams to one of the existing categories:
- In WebSafetica, go to Applications and Websites.
- Find the app you want to re-categorize and click its category.
- Select a new category for the app from the list.
- Create a new category specifically for MS Teams. You can do that in Safetica Management Console by following these steps.
This setting ensures that Microsoft Teams remains accessible while other IM applications are effectively blocked.