Please visit the Lightspeed Systems Community Site for the latest documentation.
Access Keys:
Skip to content (Access Key - 0)








Search Lightspeed Systems Rocket

Navigation

Toggle Sidebar

Rule Sets

Skip to end of metadata
Go to start of metadata

Rule Sets are lists of web site categories, keywords, and actions that control how users can access the Internet.

The Lightspeed Systems Web Filter module comes with three built-in rule sets:

  • Default – CIPA-compliant filtered access to Internet content. Content categories such as Adult and Forums, and sites in the Security category are blocked, while most other categories are allowed. The Lightspeed Systems Web Filter module applies this Rule Set to anyone who is not assigned to any other Rule Set.
  • Allow All – Unfiltered access to all Internet content, including Adult, Forums, and Security category.
  • Block All – No Internet access. All categories are blocked.

You can create local exceptions to define different content for your users. For example, you may want to allow access to Webmail sites for teachers, but not students. You would create two different Content Filter Property Sets: One for teachers with Forums Webmail category allowed; and one for Students with Forums Webmail blocked. To simplify the process, you can use the three predefined Rule Sets as a starting point for your custom Rule Sets.

Creating a Rule Set

  1. From the Policy Management dashboard, click Rule Sets, and then click New Rule Set.
  2. In the New Rule Set form, enter a meaningful name and description.

  3. Choose a rule set from the Copy Settings From dropdown list, and then click Save. This action populates your new rule set with allowed and blocked categories from the rule set you selected.
  4. On your new Rule Sets form, review and select options to apply for this Rule Set.
  5. Click Save.
Important:
Rule Sets are not active until you assign them. Use the Assignments page to see a list of policy assignments, change policy assignments, or add new policy assignments.

Search Engines

  • Filter image search thumbnails (Google and Bing) - Remove image thumbnails from search results from blocked content categories.
  • Force safe search (Google, YouTube and Bing) - Restrict all Google, YouTube, and Bing searches to enable their "safe search" feature.
  • Block Google HTTPS search (fail-safe) - Restrict all secure connection HTTPS searches on Google. (This blocks *.google.com).
  • Disable Google auto-complete - Check (select) this option to prevent Google instant search.
  • Allow YouTube for Schools - Allow only YouTube pages within the YouTube for Schools portal. You must have a YouTube for Schools code to enable this feature. Enter your code on the General page.
  • Select blocked search keywords to filter - Use the selected Block Search Keywords lists to filter search results.
Image Searches on Google Drive:
If you block Unknown URLs, Domains and IP Addresses under Category Options thumbnails will not be displayed for image searches using the Research tool on Google Drive (formerly Google Docs). This is due to the fact that the Web Filter module expects a source URL or domain to be appended at the end of the search string, which the Google Drive Research tool does not provide.

Non-HTTP Traffic

  • Filter non-HTTP traffic by IP address - The Content Filter is designed to filter HTTP traffic; therefore, it has the ability to distinguish HTTP traffic from everything else. With this option enabled, the Content Filter will block the non-HTTP sessions (e.g., HTTPS, FTP, SMTP, etc.) with a destination IP address in a category that is set to "Block".
  • Block non-HTTP traffic to unknown IP addresses - Similar to the above feature, when this option is enabled, the Content Filter will block any non-HTTP sessions with a destination IP address that is not categorized in the content database.

URL Patterns

The Content Filter can allow or block requests that match the selected lists of URL Patterns. Select the URL pattern list to use, then choose to block or allow requests from each list.

Lockouts

The Lightspeed Systems Web Filter module temporarily locks out users who persistently try to visit blocked web sites. This feature was designed to help prevent content filter abuse. Locked out users lose their Internet access until the lockout expires. When this abusive behavior is detected, the abuser's Internet access is blocked (based on IP) for a configurable amount of time. An optional email can also be sent to notify a responsible party that the Lockout has occurred.

Use the Lockouts report to view and manage locked-out users.

Because the Lockout options are configured in each Rule Set, you can apply different settings to various user groups and times of day.

  • Block internet access for: 15 minutes - Temporarily block the user from continued web access for X number of minutes. (Maximum 60 minutes, default of 15)
  • Tolerance - A Lockout will occur when a user attempts to access a Lockout category more than X times in X seconds. (Maximum 60 seconds, default of 5 times in 60 seconds)
  • Email Notifications - Email notifications will be sent to the provided email addresses whenever a lockout occurs. Separate multiple addresses by comma. The email identifies the IP address. If the locked out machine is running the User Agent, the email will also identify the logged-in user.

Access Page

You can configure override access and custom access pages for custom user lists or your entire organization.

  • Override duration - Use the slider to set the override duration, which can be from 15 to 120 minutes.
  • Require username and password to override - Select (check) this option to require users to enter their network login and password to unblock the requested web site.
    • Restrict username account to override access list - Check (select) this option and then select the list from dropdown list. If you use an override list, the required username entered must match an entry in the selected list in order to have access to perform the override. If you do not use an override list, the required username entered must match the current known user identity. This is to ensure the user performing the override is the same user who was redirected to the access page.
Note:
See Override Users for more information about creating custom override users lists.
  • Allow users to submit blocked websites for review - This option allows users to click a link to submit the requested site to Lightspeed Systems staff for review and recategorization.
    Blocked for Review Video
    Click here to watch a video tutorial about how to let users submit blocked websites for review.
    • Require email address and review reason – You can also require users to submit their email address and review reason. If you enable this option users will be presented with the following form.

  • Use custom access page - To enable a custom access page check (select) the checkbox and select the custom access page from the dropdown list.

Category Options

You can set options for each content category, as well as for custom categories.

Note:
See KB article [*Lightspeed Master Content Database - Category List - Q10373*] for a list of Lightspeed Systems categories.
  • Allow/Block - Select (check) to allow access for each content category.
  • Overrides - Select (check) to apply this rule set's Override settings so users can visit web sites that would otherwise be blocked.
  • Lockout - Select (check) to apply this rule set's Lockout settings to temporarily block Internet access for users who persistently try to visit blocked web sites.
  • File Extensions - (Optional) Open the dropdown menu to select a Blocked File Extensions list to this content category.
  1. Mar 29, 2012

    Adam Page says:

    Hi, The Maximum tolerance time is 60 seconds not 600. I also do not get asked ...

    Hi,

    The Maximum tolerance time is 60 seconds not 600.

    I also do not get asked how long to apply an override for, it overrides for the length of time specified in the rule set.

    regards,

    Adam

    1. Mar 29, 2012

      Brian Bartky says:

      Adam, Thanks for pointing that out! The page has been corrected. Take care, Br...

      Adam,

      Thanks for pointing that out! The page has been corrected.

      Take care,
      Brian

      ETA: I will follow-up on the override.

    2. Mar 29, 2012

      Brian Bartky says:

      Adam, The Override duration description has been corrected. Again, thanks for y...

      Adam,

      The Override duration description has been corrected. Again, thanks for your help!

      Brian

  2. May 10, 2012

    Adam Page says:

    Hi, Shouldn't Ads, shopping.spam and Spam all be in the normally blocked categ...

    Hi,

    Shouldn't Ads, shopping.spam and Spam all be in the normally blocked categories section and be blocked by default?

    Ads should not be allowed to school children due to the possible risk of children being exposed to inappropriate or illegal content via adverts and the other two categories certainly should not be allowed by default either.

    Regards,

    Adam

  3. Oct 23, 2012

    Daniel Field says:

    Rather than having Lightspeed Systems being emailed for review, it would be nice...

    Rather than having Lightspeed Systems being emailed for review, it would be nice if my school's helpdesk was emailed for reviewing of blocked content. I have been testing this all morning, and just realised where the emails are going.

    1. Oct 24, 2012

      Dan Fry says:

      Hi Dan, The Rocket will email us a copy of the blocked content review request b...

      Hi Dan,

      The Rocket will email us a copy of the blocked content review request but this can also be configured to additionally send it to a help desk email, You can find the option under Web Filter -> General, as per http://wiki.lightspeedsystems.com/display/suite/General

      • Dan
  4. Feb 28

    Justin Morse says:

    Is there a way to extend the override duration to a full day or 24 hours? Teache...

    Is there a way to extend the override duration to a full day or 24 hours? Teachers would like to be able to login in the morning and not be blocked again for the rest of the day.

    Thank You,
    Justin

TinyURL: Rule Sets
Adaptavist Theme Builder Powered by Atlassian Confluence