Web Caching Problem

[dmorris]

A screenshot is worth a thousand posts.
Its "In URLS Pass list."
Whats in the pass list?

[justasking]

A screenshot is worth a thousand posts.
Its "In URLS Pass list."
Whats in the pass list?

Here's the blocked sites



Here's the pass sites

[dmorris]

You need to remove "google.com" from the pass list.
That passes all google.com

[justasking]

You need to remove "google.com" from the pass list.
That passes all google.com

So they can't access google if I do that? But they are allowed to use google.

[dmorris]

But they are allowed to use google.

OK, lets take a step back for a minute.
This has nothing to do with time of day, policy manager, web cache, or anything else.

You are trying to block them from mail.google.com. It sounds like you are blocking all sites, except explicitly passed ones.
So you passed google.com

mail.google.com is a subdomain and therefore is matched by "google.com" pass list entry.
www.google.com is also a subdomain and also allowed. video.google.com is also allowed.
effectively "mail.google.com" in inside the huge set of sites that is allowed when you allow "google.com"

Now, if you DONT want to allow mail.google.com, then dont allow "google.com"
Or you can add "(\?>!mail.)google.com" to your passlist instead which will eventhing google.com EXCEPT mail.google.com

[justasking]

OK, lets take a step back for a minute.
This has nothing to do with time of day, policy manager, web cache, or anything else.

You are trying to block them from mail.google.com. It sounds like you are blocking all sites, except explicitly passed ones.
So you passed google.com

mail.google.com is a subdomain and therefore is matched by "google.com" pass list entry.
www.google.com is also a subdomain and also allowed. video.google.com is also allowed.
effectively "mail.google.com" in inside the huge set of sites that is allowed when you allow "google.com"

Now, if you DONT want to allow mail.google.com, then dont allow "google.com"
Or you can add "(\?>!mail.)google.com" to your passlist instead which will eventhing google.com EXCEPT mail.google.com

That's a big help.

Btw, where can I learn commands like (\?>!mail.) , I would like to expand my knowledge using UTM. Thanks!

[dmorris]

Its a regular expression.
http://docs.oracle.com/javase/7/docs...x/Pattern.html
That is called a negative lookbehind.

I would not recommend this approach in general.
You will generally find that blocking all sites except certain sites is difficult.
Thats why we offer categories to help with blocking categories of sites and reports to monitor web usage.

[justasking]

Its a regular expression.
http://docs.oracle.com/javase/7/docs...x/Pattern.html
That is called a negative lookbehind.

I would not recommend this approach in general.
You will generally find that blocking all sites except certain sites is difficult.
Thats why we offer categories to help with blocking categories of sites and reports to monitor web usage.

Thanks once again.

I'll try this for the mean time, I'll monitor and post some results. Hopefully a good one.

[justasking]

I think my problem is solved!

Thank you dmorris for helping me out.

[dmorris]