Allow list to access the blocked web filter sites

There is no global whitelist.

Create a category called "Whitelist" and add all the domains you want there.  Alternately, create a URL group called "Whitelist" and add the domains there.

In your policy, make a rule that says Whitelist is Allow.

This give you greater control so that your whitelist can apply to only certain users or only certain times of the day.

Thanks Michael for that idea, but how i add ip addresses of the users to that policy.

Thanks. 

Thanks Michael for that idea, but how i add ip addresses of the users to that policy.

Thanks. 

There are two parts to the question:

How do I know what user is coming in?

How do I apply a rule to a user?

For the first question, most people are using Active Directory to manage users.  Users can authenticate using NTLM (SSO), Captive Portal, or an AD agent.  If you are not using AD, or if you want to permanently associate a user with an IP then look at "Clientless Users".  You can create a clientless user for a specific IP.  Please note if you are using DHCP and the IP changes I don't think the clientless user automatically changes to the new IP.

Then in the Web Policy, in a rule the leftmost dropdown box allows you to select the user or group.  That rule will now only apply to what you have selected.

Hi Michael,

Thanks alot i will give it a try and give you the feedback, i appreciate it :)