Configure Web Protection Policies

Every aspect of Web Protection from the website allow and block lists, category of website to allow or block, schedule (for example during office hours) as well as whether to deploy a Web Bandwidth Check is controlled via Web Protection Policies.

Default policies are available for Laptops, Desktops and Servers with the ability to setup your own custom policies (as well as edit the defaults) via Settings, Web Protection and Protection Policy.

wp2_settings_drop preview_choose_policy

We recommend creating Client specific policies. These not only allow you to create policies that precisely match the client's requirements, but can be combined with the Manage Feature Policies for Client Group feature. Where enabled, this feature allows users in the Client Group to manage their assigned policies. As any changes will affect the devices using that policy we do not recommend using shared policies with this feature.

Custom Policy

To create a custom policy, click New, enter the Policy Name for identification, from the Base Policy On drop-down select an existing policy to act as a template and choose the Policy Type: All, Server, Desktop or Laptop

This opens the Protection Policy dialog containing the following configuration sections:




Policy, behavior, block message and end user interaction.

Installation Settings *

Agent language and branding settings

Web Security

Allow, Block or Schedule access based on website Category

Category Filtering

Allow, Block or Schedule access based on website Category


Allow specific URLs


Block specific URLs


Specify during which hours website categories are allowed or blocked


Configure the Web Bandwidth Check to monitor website download traffic on the device and fail where this exceeds the entered threshold

Reporting *

Enter the URLs to exclude from the Web tab

* Please note that these options are only supported in the Web Protection engine included from Agent 10.4.4

These sections are automatically populated from the selected Base Policy On setting, and after amending the sections as required click Save to create the custom policy.

Please note that although the default policies are locked for deletion, their settings may be edited by highlighting the desired policy then clicking upon the Edit button, or by double-clicking on its name.

Web Protection Engine from Agent 10.4.4

Agent 10.4.4 introduced an upgraded Web Protection engine to provide additional functionality, with Web Protection automatically upgrading to this version when installing or updating to Agent 10.4.4 (or later).

As part of this process we have migrated any existing policies to the new format and updated the Web Protection Polices dialogs to provide a consolidated view of the options available for both version.

This means that you can include the 10.4.4 options in your Protection Policies and if deployed to any pre-10.4.4 devices these settings are dormant (as they are unsupported), however when the device is upgraded to 10.4.4 or later these settings then become active and are applied.

Where a section is unique to the new Web Protection engine, the dialog will have an Options Available only in Agent 10.4.4 and greater label.

Please refer to the Feature Policy Report for a list of all of the policies currently in use across your policy supporting features.