In the Web Console, you can configure Web Control settings in the policy properties (Application settings → Security Controls → Web Control).