We have a series of Active Directory groups for access to specific categories. So we allow users of the "Social Networking" group access to the "Social Networking" categories and similar groups for "Travel" and "Finance".
What I'm seeing is that as a user in the "Social Networking" group I match the filter assignment and get assigned the action, but the "Social Networking" action only allows access to "Social Networking". So if I try to go to Google I get denied because this is in our "Base Categories" action.
I was expecting it to fall back to the "Base Action", but if I'm correct once I'm assigned an action there is no fall back. The fall back only applies if the filter assignment is not matched.
Can someone please confirm that this is correct?
This will cause us a problem as I was hoping to use it in a similar way to our previous appliance with fell through rules until blocked.
I put together a diagram in the same fashion as the example.
TIA
This thread was automatically locked due to age.
