If you haven't already downloaded and read the related Knowledgebase document 293192 ("HTTP Profiles Guide"), you should. The quotation below is from that document.
-------------------------
The HTTP proxy can be configured to apply globally to selected networks. Alternatively, you can create individual proxy profiles that can be used to enforce various security policies to be applied to different segments of your network. That way you can define different content filtering policies for the various departments within your organization, even with varying user authentication methods.
At present, only one profile can be applied to a given group in a given subnet, although the profiles are processed sequentially, so a smaller subnet or group within a larger one could have a different profile if placed before the more-inclusive one. For example, in a larger organization, the profile for sales managers would be placed before the profile for sales reps. Also, the profile for a 10.10.10.128/29 subnet obviously would have to be before one for 10.10.10.0/24.
Inside the Proxy Profile, individual filter assignements are processed sequentially until one matches, so, here too, more-specific assignments must be above ones that apply more broadly. The filter assignment for 8am to 9am must appear above the one for 7am to 11am. In a school, the filter assignment for teachers would go before the one for students.
The only "global" items are the 'Web Security >> HTTP' Exceptions which are processed prior to the Profiles. Although you can create whitelists with Exceptions, there are no blacklists that can be shared between profiles, but I'm not convinced that it makes sense to try to do otherwise.
Authentication with the HTTP Proxy works only if the users' browser is manually set to speak to it, so be aware that someone will have to make that change in every PC. The instructions to do so are straightforward, but we all know not everyone can follow them.
Please offer other design considerations that I've missed and any critiques or questions about the above. Where would you start designing a structure for an organization?
Thanks for your thoughts - Bob
This thread was automatically locked due to age.
