Policy Guide › Protecting Data at the Network Boundary › Detecting URLs in Traffic Crossing the Network Boundary › Exempting URLs in Network Events

Exempting URLs in Network Events

Use xmlattr lookup commands to exempt network events originating from specific URLs. Network events from exempted URLs are excluded from policy processing and cannot cause triggers to fire.

For example, you may want to allow traffic from the Unipraxis web site but block all other network traffic.

Syntax

To exempt network events originating from specific URLs, the syntax is:

xmlattr WHERE apm/event/file/url <stringoperator> <URLs>

Where:

<stringoperator> is either 'excludes' or 'excludes all'. See the reference below for full details.

<URLs> specifies the URLs you want to detect.

Examples

• This example exempts network events originating from unipraxis.com:

  xmlattr WHERE apm/event/file/url excludes "unipraxis.com"
  

• This example uses wildcard to exempt multiple URLs:

  xmlattr WHERE apm/event/file/url excludes all
  {"unipraxis.co.uk", "unipraxis.net"}
  

More information:

XML Attribute Lookup Examples

XML Attribute Lookup

<Stringoperator>