Allow/whitelisting Blue Coat / ProxySG proxy solutions


If your organization has implemented a Blue Coat proxy solution (e.g. ProxySG), you might need to perform additional whitelist actions to make sure end-users are able to click-through links included in Hoxhunt's training emails.

The following instructions are taken directly from Broadcom's ProxySG documentation. In any discrepancy, please refer to the original and official ProxySG documentation


How do I override URL category filtering for a website?

Problem: I would like to allow access to a URL but the category associated with the URL is blocked.

Solution: You can allow access to websites that are denied by your policy by creating a whitelist.

For example, the social media category is blocked, but you would like to allow your employees access to Facebook, you can do that by creating a whitelist. To create a whitelist see the topic "Create Whitelist" below.


Create Whitelist

A whitelist allows you to allow access to specific websites when the category the URL represents is not allowed. For example, while pornography is a blocked category, you can use the whitelist to allow access to since there are no nude photographs on its front page.

A policy-based category allows you to group manually-defined lists of URLs and domains. You can use these lists in conjunction with policy actions to define whitelist or blacklist rules. Polices like the whitelist example below provide a final exemption for all URLs you need your users to always allow access to, regardless of the categories that are blocked earlier in policy.

Consider your default proxy policy action when defining rules of this type. The goal of a policy of this type is to contradict the default policy action as well as that of any preceding policy action that might serve to deny users access to URLs that are important for the operation of your business.

From the Management Console, select Configuration > Policy > Visual Policy Manager > Launch. The Visual Policy Manager opens in a new window.

2. Go to the Web Access Layer containing your rule(s) for denying access to URL categories.

3. Add a new rule above the first rule in the layer.

4. Right click the Destination column within the new rule and select Set.

5. Click New, and select Request URL Category.

6. Name the new Request URL Category Whitelist.

7. In the Categories section, select Policy and click Add. The VPM prompts you to add a name for the new policy category object.

8. Name the new policy category object Whitelist_URLs and click OK.

9. Select Whitelist_URLs and click Edit URLs.

10. Enter each of the URLs you want your users to be able to access. Enter one URL per line and click OK when finished.

11. Select the check box next to Whitelist_URLs.



12. Click OK to save the new policy object, and OK again to set it as the Destination in this rule.

13. Right-click the Action column, and select Allow.

14. Because the Allow action may need to override previous policy decisions, you want to make sure that the rule you’ve just created applies last.
To move this layer to the final position:

a. Select Edit > Reorder Layers.

b. Select the URL categories layer, and click Move Down until it is the final entry in the list.

c. Click OK.

15. Click Install Policy to commit the new layer to active policy.

NOTE: You can only create a whitelist if the default proxy policy is set to deny.



Create whitelist:



Was this article helpful?

0 out of 1 found this helpful

Have more questions? Submit a request