Edit a policy route

Policy routes consist of endpoints, content rules and default actions. You can edit any of these parameters to configure how your security policy detects content and the actions the Gateway performs when matching traffic is detected.

You must make sure you Apply the new configuration when changes have been made to a policy route.

References to Web policy content are only available when a Web Gateway is included in the peer group.

How do I...

• Rename a Policy Route?

  1. Select the policy route you want to change.
  2. Click Edit. The Modify Policy Route page is displayed.
  3. In the Overview section, click Click here to change these settings.
  4. Rename the route and add any relevant Notes.
  5. Click Save.
• Edit the To and From endpoints of a Mail Policy Route?

  1. Select the policy route you want to change.
  2. Click Edit. The Modify Policy Route page is displayed.

  3. In the For Mail Sent section, click Edit. The Edit Route Selector dialog is displayed.

  4. Select the address list(s) for your From endpoints.
  5. Select the address list(s) for your To endpoints.
  6. Click Update.
• Edit the Traffic endpoints of a Web Policy Route?

  1. Select the policy route you want to change.
  2. Click Edit. The Modify Policy Route page is displayed.
  3. In the Traffic section, click Edit. The Edit Route Selector dialog is displayed.
  4. Select the user or machine list(s) for your From endpoints.

  5. Select the Internet Zone(s) for your any To endpoints.

     The Between 'Everyone' and 'Trusted Sites' Policy Route is used to categorize automatic update servers used by, for example, Microsoft. Disabling this route can cause any automatic updates to fail. Clearswift recommends that you do not disable this route.

  6. Click Save.
• Enable encryption or decryption on a Mail Policy Route?

  1. Select the policy route you require.
  2. Click Edit. The Modify Policy Route page is displayed.
  3. In the Do NOT Decrypt or Apply Encryption Endpoints section, click Click here to change these settings.
  4. If you want to specify the encryption policy, select the check box labeled: By default apply encryption endpoint delivery policy.

  5. If you want to specify the decryption policy, select the check box labeled: Decrypt and apply content rules to PGP and S/MIME messages.

     If your Gateway is operating in FIPS mode, you cannot apply decryption to PGP messages. PGP encryption/decryption is not compliant with FIPS 140-2 and is unavailable in FIPS mode.

  6. Click Save.
• Specify the default action of a Policy Route?

  1. Select the policy route you want to change.
  2. Click Edit. The Modify Policy Route page is displayed.
  3. In the By Default Perform This Action section, click Click here to change these settings.

  4. Select a new action from the drop-down menu.

     The Web Gateway also enables you to specify the Block Page to use with this action. You can also configure the block page to be overridden by the user, and a warning page to be displayed when the time policy is about to expire.

  5. Click Save.
• Apply content rules to a Policy Route?

  1. Select the policy route you require.
  2. Click Edit. The Modify Policy Route page is displayed.
  3. In the Unless One Of These Content Rules Triggers section, click New.
  4. Select the content rule(s) you require. Each rule is added to the route when you select it from the list.
  5. Click Close.
• Copy a set of content rules from another Policy Route?

  1. Select a policy route. This will be the destination route to which rules will be copied.
  2. Click Edit. The Modify Policy Route page is displayed.
  3. In the Task Panel, select Copy rules from route. A dialog box is displayed.

  4. Use the Select source route drop-down menu to select the route with the content rules you need to copy. This is the source route.

     Select Overwrite destination route to replace any existing rules on the destination route. If you leave this check box unselected, the copied rules from the source route will be added to any rules already on the destination route.

  5. Click Copy Rules. The new rules are added.
  6. Change the priority of the content rules where necessary.
  7. Apply the configuration.
• Change the priority of a content rule on a route?

  1. Select the policy route you require.
  2. Click Edit. The Modify Policy Route page is displayed.
  3. Select the content rule from the Unless One Of These Content Rules Triggers section.
  4. Use the and buttons to change the priority of the selected rule.
  5. Click Close.
• Delete a policy route?

  You can delete a policy route you never want to use again.

  This procedure permanently removes the policy route. To temporarily stop using a route, you can disable it.

  1. Select the policy route you require.
  2. Click Delete. A Confirm Delete dialog box is displayed.
  3. Click Yes.
  4. Apply the configuration.

See also...

• About Policy Routes
• About Content Rules
• Apply the new configuration