In the main menu of the Open Single Management Platform Console, go to the Application & Services → NGFW section.
Select the Objects tab, then select Security profiles → Web Control.
In the upper part of the workspace, click the Create button.
This opens the Web Control profile creation window.
In the Name field, enter a name for the new profile.
The name of the profile must be unique among all profiles.
The maximum length is 128 characters.
If necessary, in the Description field, enter an arbitrary description of the profile.
The maximum length is 256 characters.
To use the cloud service for website categorization, set the Look up objects in KSN toggle switch to On.
If you need to edit the default Web Control rules for predefined web categories, go to the Default web categories section and follow these steps:
To change the action to be performed when an attempt is made to gain access to uncategorized websites, select an action in the Uncategorized URL action list. The default action is Show blocking page.
To disable logging when an attempt is made to gain access to uncategorized websites, set the Uncategorized URL logging toggle switch to Off. The default state is On.
To change the action and logging settings for a specific web category:
Select a web category from the list. To quickly go to the desired category, you can use the filters and search in the toolbar.
Specify an action for the selected web category by selecting the action from the list in the Action column.
Enable or disable logging for the selected category by enabling or disabling the toggle switch in the Logging column.
Configure Web Control rules for custom web categories.
In a profile, you can select previously created custom web categories, or create new custom web categories as you create the profile.
To use an existing custom web category in a profile:
Go to the Custom web categories section.
Select a web category from the list.
To quickly go to the desired category, you can use the filters and search in the toolbar. To quickly filter the custom categories that are used in the profile, select the Show used in profile tab.
Manage the following profile settings for the selected category:
Include the selected custom web category in the Web Control profile. To do this, click the Use in profile button above the table, or enable the toggle switch for the selected web category in the Used in profile column.
Specify an action for the selected web category by selecting the action from the list in the Action column.
Enable or disable logging for the selected web category by enabling or disabling the toggle switch in the Logging column.
If you need to edit the settings of a web category, click the name of the web category in the table and click the Edit button in the toolbar.
To create a new custom web category:
Click the Create button in the toolbar.
This opens the custom web category creation window.
Manage the following settings for the category that you want to create:
In the Name field, specify a name for the category.
If necessary, in the Description field, enter an arbitrary description of the category.
The maximum length is 256 characters.
If you want to add a website to a custom web category, click the Add button in the toolbar and enter an URL or URL mask in the field under the Value column.
If you want to remove a website from the custom web category, select the website in the table and click the Delete button in the toolbar. To quickly filter by URL, you can use the search field in the toolbar.
Click the Create button in the lower part of the custom web category creation window.
The new web category is created and added to the list of custom web categories in the Web Control profile creation window.
You can also view and edit custom categories on the Custom web categories tab.
If you need to configure the list of exclusions from Web Control rules, in the Web Control profile creation window, go to the URL exclusions section and follow these steps:
To disable logging of security events when websites from the list of exclusions are accessed, set the Log if web resources from the exclusion list are accessed toggle switch to Off. By default, the toggle switch is set to On.
To add a new exclusion to the list, click the Create button in the toolbar and enter a URL or URL mask in the field under the Value column.
To remove an exclusion from the list, select the exclusion in the table and click the Delete button in the toolbar.