Add Exceptions in FireCloud
Applies To: FireCloud Internet Access
FireCloud is a beta product that is only available to participants in the WatchGuard FireCloud Beta program. To try FireCloud Internet Access, join the WatchGuard Beta test community.
When you enable security services to block sites, ports, and content, in some cases, you might not want FireCloud to block an IP address, URL, domain, or email address. You can add an exception in FireCloud to allow users access. For example, you might configure FireCloud to block media streaming, but add an exception for a specific streaming service.
To add an exception in FireCloud, from WatchGuard Cloud:
- Select Configure > FireCloud.
- Click the Exceptions tile.
The Exceptions page opens. - Click Add Exception.
The Add Exception dialog box opens. - From the Select Service menu, select the service you want to add an exception for. For information about how to use FQDN in exceptions and policies, go to About Policies by Domain Name (FQDN) in Fireware Help.
- Blocked Site — Add an exception for a host IPv4 address, network IPv4 address, host IPv4 address range, or FQDN.
- Botnet Detection — Add an exception for a host IPv4 address, network IPv4 address, host IPv4 address range, or FQDN.
- Gateway AntiVirus / APT Blocker — Add an exception for the MD5 hash value of a file and specify the action to take for the file (Allow or Deny).
- Geolocation — Add an exception for a host IPv4 address, network IPv4 address, host IPv4 address range, or FQDN.
- HTTPS Decryption — Add an exception for an HTTPS domain and specify the action the service takes when the domain is encountered (Allow or Deny).
- IPS — Add an exception for a signature ID and specify the action totake when IPS detects the signature (Allow, Drop, or Block). To generate an alarm for the exception, select the Alarm check box.
- WebBlocker — Add an exception for a website and specify the action WebBlocker takes when users try to go to the website (Allow or Deny). You can add a WebBlocker exception that is an exact match of a URL, a pattern match of a URL, or a regular expression. For more information on how to specify an exception, go to WebBlocker Exceptions. To generate an alarm for the exception, select the Alarm check box.
- (Optional) In the Description text box, type a description of the exception.
- Click Save.