Concept Guide

n Trustworthy - These are well known sites with strong security practices and may not expose the user
to security risks. There is a very low probability that the user will be exposed to malicious links or
payloads.
n Low risk - These are benign sites and may not expose the user to security risks. There is a low
probability that the user will be exposed to malicious links or payloads.
n Moderate risk - These are generally benign sites, but may pose a security risk. There is some
probability that the user will be exposed to malicious links or payloads.
n Suspicious - These are suspicious sites. There is a higher than average probability that the user will be
exposed to malicious links or payloads.
n High risk - These are high risk sites. There is a high probability that the user will be exposed to
malicious links or payloads.
c. From the Action drop-down, select Allow or Deny as required.
For a complete list of categories and information about each of these categories, visit the BrightCloud®
Security Services web page at http://www.brightcloud.com/tools/change-request-url-ip.php.
6. To set a bandwidth limit based on web category or web reputation score, select Application Throttling
checkbox and specify the downstream and upstream rates in Kbps. For example, you can set a higher
bandwidth for trusted sites and a low bandwidth rate for high risk sites.
7. If required, select the following checkboxes:
l Log—Select this checkbox if you want a log entry to be created when this rule is triggered. Instant
supports firewall based logging function. Firewall logs on the W-IAPs are generated as security logs.
l Blacklist—Select the Blacklist checkbox to blacklist the client when this rule is triggered. The
blacklisting lasts for the duration specified as Auth failure blacklist time on the Blacklisting tab of the
Security window. For more information, see Blacklisting Clients on page 183.
l Disable scanning—Select Disable scanning checkbox to disable ARM scanning when this rule is
triggered. The selection of the Disable scanning applies only if ARM scanning is enabled, For more
information, see Configuring Radio Settings on page 257.
l DSCP tag—Select the DSCP tag checkbox to specify a DSCP value to prioritize traffic when this rule is
triggered. Specify a value within the range of 0 to 63. To assign a higher priority, specify a higher value.
l 802.1p priority—Select the 802.1p priority checkbox to specify an 802.1p priority. Specify a value
between 0 and 7. To assign a higher priority, specify a higher value.
8. Click OK to save the rules.
9. Click OKon the Roles tab to save the changes to the role for which you defined ACL rules.
In the CLI
To control access based on web categories and security ratings:
(Instant AP)(config)# wlan access-rule <access_rule>
(Instant AP) (Access Rule "<access-rule>")# rule <dest> <mask> <match> webcategory <webgrp>
{permit| deny}[<option1....option9>]
(Instant AP) (Access Rule "<access-rule>")# rule <dest> <mask> <match> webreputation <webrep>
{permit|deny}[<option1....option9>]
(Instant AP) (Access Rule "<access-rule>")# end
(Instant AP)# commit apply
Example
(Instant AP)(config)# wlan access-rule URLFilter
(Instant AP) (Access Rule "URLFilter")# rule any any match webcategory gambling deny
(Instant AP) (Access Rule "URLFilter")# rule any any match webcategory training-and-tools
permit
(Instant AP) (Access Rule "URLFilter")# rule any any match webreputation suspicious-sites deny
Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Deep Packet Inspection and Application Visibility | 270