Blue Coat Systems Proxy SG manual Request.filterservice

ProxySG Content Policy Language Guide

request.filter_service( )

Controls whether the request is processed by an external content filter service. The ProxySG currently supports Websense Enterprise Server external content filtering.

Directing the request to an external content filter service does not affect policy based on categories determined through an on-box vendor or CPL category definitions.

Categories determined by Websense Enterprise Server are not available to the category= condition, although they appear in access logs. Effectively, all policy based on the Websense determined categories must be implemented on the Websense server.

Note: This property might be overridden by the deprecated content_filter_override(yes) property.

Replaces: content_filter_override(yes)

Syntax

request.filter_service(servicename[, fail_openfail_closed]) request.filter_service(no)

The default values are no and fail_closed.

where:

•servicename—A configured external content filter service that supports request modification. Currently only Websense Enterprise Server is supported. On upgrade, the service name websense is automatically generated.

•fail_open—If servicename is unavailable, the request is processed and a response may be delivered, subject to other policy.

•fail_closed—If the servicename is unavailable, the request is denied.

•no—Prevents the request from being sent from the ProxySG to the external content filter service.

Layer and Transaction Notes

•Use in <Cache> and <Proxy> layers.

•Applies to FTP and HTTP transactions.

Example

The following example directs requests to the Websense server, but allows processing to continue if the service in unavailable:

<proxy>

request_filter_service(websense, fail_open)

The following policy establishes a general rule that all request are processed by the external filter service named filter. It then specifies some exceptions to this general rule in a later layer:

<proxy> ; All request are content-filtered by default request.filter_service( filter )

<proxy> request.filter_servce( no ) ; exceptions to content-filtering

210