Amer Networks E5Web GUI - Manual (Page 454)

Reclassification of Blocked Sites
As the process of classifying unknown web sites is automated, there is always a small risk that
some sites are given an incorrect classification. cOS Core provides a mechanism for allowing
users to manually propose a new classification of sites.
This mechanism can be enabled on a per-HTTP ALG level, which means that the administrator
can choose to enable this functionality for regular users or for a selected user group only.
If reclassification is enabled and a user requests a web site which is disallowed, the block web
page will include a dropdown list containing all available categories. If the user believes the
requested web site is wrongly classified, he can select a more appropriate category from the
dropdown list and submit that as a proposal.
The URL to the requested web site as well as the proposed category will then be sent to
Clavister's central data warehouse for manual inspection. That inspection may result in the web
site being reclassified, either according to the category proposed or to a category which is felt to
be correct.
Example 6.18. Reclassifying a blocked site
This example shows how a user may propose a reclassification of a web site if he believes it is
wrongly classified. This mechanism is enabled on a per-HTTP ALG level basis.
Command-Line Interface
First, create an HTTP Application Layer Gateway (ALG) Object:
Device:/> add ALG ALG_HTTP content_filtering
WebContentFilteringMode=Enable
FilteringCategories=SEARCH_SITES
AllowReclassification=Yes
Then, continue setting up the service object and modifying the NAT rule as we have done in the
previous examples.
InControl
Follow the same steps used for the Web Interface below.
Web Interface
First, create an HTTP Application Layer Gateway (ALG) Object:
1. Go to: Objects > ALG > Add > HTTP ALG
2. Specify a suitable name for the ALG, for example content_filtering
3. Click the Web Content Filtering tab
4. Select Enabled in the Mode list
5. In the Blocked Categories list, select Search Sites and click the >> button
6. Check the Allow Reclassification control
7. Click OK
Then, continue setting up the service object and modifying the NAT rule as we have done in the
Chapter 6: Security Mechanisms
454