6.10 Understanding the Order of Evaluation

WebMarshal evaluates Connection Rules first, then HTTPS Rules, Quota Rules, Standard Rules, and finally Content Analysis Rules. Within each type, rules are evaluated in a defined order, which you can configure.

The order of evaluation can affect the outcome, because WebMarshal bases its action on the first rule triggered. For instance, the default WebMarshal rules block the virus scanner test file eicar.com using the rule Block Dangerous File Extensions. Since this rule is applied before the malware scanning rules, eicar.com is not reported as containing malware.

Rules are evaluated in “top down” order as presented in the console display.

To change the order of evaluation of rules:

1.Ensure that Rules is expanded.

2.Select a rule type in the left pane.

3.Select a particular rule or rule container in the right pane.

4.Move the item up or down in the evaluation order using the up and down arrow icons in the tool bar.

5.Commit configuration to apply the changes.