WS1000 - How to allow large file download without scanning for only admins

> allow file downloading without scanning for only admins based on AD authentication

The web appliance currently does not allow you to bypass scanning based on group policy.  However, you can do an "all or nothing" policy for the URL.

Steps:

1. Add the URL to Local Site List.
2. Override the risk class as Trusted (so this URL will not be scanned if allowed).
3. Override the categroy as something that is blocked for everyone in your Default Policy; In this example, I set category to 'Proxies & Translators'.
4. Save this new entry.
5. Add a new Addtional Policy.
6. Under Select Users, pick the AD users that should be allowed to access that trusted URL that you just added to the Local Site List.
7. Under Site Categories, scroll down to 'Proxies & Translators' and select 'Allow' in the Action drop-down menu.
8. Under Name and Schedule, enter a policy name, select the effective time, turn on the policy and save the change.

For users not found in the additional policy, they will be blocked when trying to access that URL.  For users found in the additional policy, they will be allowed to access that URL and the requested files will not be scanned.

> How to allow large file download without scanning for only admins

Allowing large file is an appliance-wide option in the Download Options page.  Unfortunately, this is not part of the group policy feature.

Cheers,

P Parker, aka Ivan M