Editing Pass list

[AdamB]

We are a medium sized organization with about 500 users. Recently we have had the need to really lock down our end users browsing capability. Due to this our end users are making a ton of requests for URL's which are blocked but have a legit business need. Our solution is to add them to the pass list. Well the problem is, we keep ending up with exceptions missing from the pass list in web filter. There are a ton that we have added 2,3 and4 times. I have logged a ticket with untangle support with not much luck, all they have advised is I can't have more than 1 session logged in at once. Does anyone know of a way around this issue?

It seems even being logged in and sitting at the bashboard causes issues if another user is logged in adding entries to the pass list.

[Jim.Alles]

Yes, NGFW administration is not a multi-user task. Two different instances open at the same time will clobber each other.

[dmorris]

You can review all changes and the differences in reports > administration > all settings changes.
additions in green, removals in red.
So you can see when each pass list entry was removed.

If using multiple browsers you can clobber other admins changes.

For example
1) admin a opens web filter settings
2) admin b opens web filter settings
3) admin a adds foo.com to pass list
4) admin b adds bar.com to pass list

admin a's changes will be clobbered because admin b saved the change made to the settings loaded in step 2.

[AdamB]

You can review all changes and the differences in reports > administration > all settings changes.
additions in green, removals in red.
So you can see when each pass list entry was removed.

If using multiple browsers you can clobber other admins changes.

For example
1) admin a opens web filter settings
2) admin b opens web filter settings
3) admin a adds foo.com to pass list
4) admin b adds bar.com to pass list

admin a's changes will be clobbered because admin b saved the change made to the settings loaded in step 2.

I appreciate the input. This is something that should probably be made clear in some wiki or something. We have been spinning our wheels adding tons of exceptions only to keep bumping into each other. Would be nice if a pop up made it clear someone else is adding exceptions. We are seeing this issue with just other users logged into the GUI sitting at the dashboard. They don't even have to be adding/editing a passed site.