So there's a particular website I don't want a pair of hosts (which I've grouped into a network group) to access.
I've bodged a solution by creating a new web filter profile which applies to that network group and to which a policy applies and to which a filter action applies.
But goodness - that seemed a long winded way to go about it? In addition, and this is really the crux of the matter because I didn't mind it being long-winded - I had to clone my existing base policy and then modify it to also block this particular website, because if I didn't, the new policy which ONLY blocked this particular website meant that the base policy did not apply!
I'm sure I must be missing something obvious.
At the moment things are working how I want them to...but I think I've got a lot of redundant policy because of how I've done it.
Hope my explanation above makes sense.
This thread was automatically locked due to age.