Configure Web Protection Policies

Every aspect of Web Protection from the website allow and block lists, category of website to allow or block, schedule (for example during office hours) as well as whether to deploy a Web Bandwidth Check is controlled via Web Protection Policies.

Default policies are available for Laptops, Desktops and Servers with the ability to setup your own custom policies (as well as edit the defaults) via Settings, Web Protection and Protection Policy.

wp2_settings_drop preview_choose_policy

We recommend creating Client specific policies. These not only allow you to create policies that precisely match the client's requirements, but can be combined with the Manage Feature Policies for Client Group feature. Where enabled, this feature allows users in the Client Group to manage their assigned policies. As any changes will affect the devices using that policy we do not recommend using shared policies with this feature.

Custom Policy

To create a custom policy, click New, enter the Policy Name for identification, from the Base Policy On drop-down select an existing policy to act as a template and choose the Policy Type: All, Server, Desktop or Laptop

This opens the Protection Policy dialog containing the following configuration sections:




Policy, behavior, block message and end user interaction.

Installation Settings

Agent language and branding settings

Web Security

Allow, Block or Schedule access based on website Category

Category Filtering

Allow, Block or Schedule access based on website Category


Allow specific URLs


Block specific URLs


Specify during which hours website categories are allowed or blocked


Configure the Web Bandwidth Check to monitor website download traffic on the device and fail where this exceeds the entered threshold


Enter the URLs to exclude from the Web tab

These sections are automatically populated from the selected Base Policy On setting, and after amending the sections as required click Save to create the custom policy.

Please note that although the default policies are locked for deletion, their settings may be edited by highlighting the desired policy then clicking upon the Edit button, or by double-clicking on its name.