8e6 Technologies R3000 manual Filtering Rules, Filtering Levels Applied

CHAPTER 1: INTRODUCTION FILTERING ELEMENTS

Filtering Rules

Individual User Profiles - A user in an NT or LDAP domain can have only one individual profile set up per domain.

Filtering Levels Applied:

1.The global (default) filtering profile applies to any user under the following circumstances:

•the user does not belong to a master IP group

•the user has not been assigned a domain default profile from an NT or LDAP authentication domain

2.If a minimum filtering level is defined, it applies to all master IP groups (and their members) and NT/LDAP groups who have been assigned filtering profiles after authenticating. The minimum filtering level combines with the user’s profile to guarantee that categories blocked in the minimum filtering level are blocked in the user’s profile.

3.For master IP group members:

a. A master IP group filtering profile takes precedence over the global profile.

b. A master IP group time profile takes precedence over the master IP group profile.

4.For IP sub-group members:

a. An IP sub-group filtering profile takes precedence over the master IP group’s time profile.

b. An IP sub-group time profile takes precedence over the IP sub-group profile.

5.For individual IP members:

a. An individual IP member filtering profile takes prece- dence over the IP sub-group’s time profile.

b. An individual IP member time profile takes precedence over the individual IP member profile.

20 8E6 TECHNOLOGIES, R3000 ENTERPRISE FILTER AUTHENTICATION USER GUIDE