Fabio's question about custom category and policy.

[support200]

I want to create a category of websites available to a specific group of users. I went to custom settings and created a category, but I don't know how to link it to a policy or group.

[support200]

Once you create a custom category, it will appear under the Blocked Categories tab on the policy editing page. You can block it there and then link it to a group on the group's editing page.

[fabio.marques]

Actually, I wanted to create a category of websites that are allowed instead of blocked... instead of creating a whitelist of various websites, I wanted to create the category and put all the websites there. Is that possible?

[support200]

Yes. Custom categories take precedence over system categories. If you ensure the custom category you created is not selected under a Blocked Category, it won't be blocked.

[fabio.marques]

I have a policy for a department called "Faturamento," and I created a custom category just for websites that this department needs to access. However, I haven't found where to set this category for this department, since other departments won't be accessing these "Faturamento" department websites.

I'm not sure if I explained it correctly.

Another detail is the mobile devices that are not on the domain/AD. Will nxfilter be able to filter them in some policy? Because I'm having a problem with a mobile phone that can't access the local Wi-Fi internet.

[support200]

In NxFilter, the Blocked Categories list shows what is blocked. If you leave your custom category unchecked, it means it is allowed.

So, you don't need to change anything in the Faturamento policy (just keep the category unchecked). But in other policies, you must check that custom category to block it for other departments.

For mobile devices, NxFilter can definitely filter them as long as they use NxFilter as their DNS server.

Even if they are not in AD, you can manage them in two ways:

1. Create users directly on the NxFilter GUI. And let them go through its login page.
2. Use IP Ranges: Create an IP pool for mobile devices in your DHCP server, and link that IP range to a user.

About the mobile phone that cannot access the Wi-Fi internet: This usually happens because NxFilter blocks DNS requests from 'unknown' or 'unauthenticated' devices. Once you set up the IP range or create a user for it, the internet should start working normally.

[fabio.marques]

I created the Groups in Active Directory and added the users.
Billing (siteA, siteB, siteC, etc.)
Finance (siteM, siteK, siteP, etc.)
IT (siteU, siteL, etc.)

* Each group has its specific sites for access, and the rest are blocked.

Then in nxfilter I created the Policies (Billing, Finance, and IT). Then I created the Custom Categories (Billing, Finance, and IT)
and assigned the specific sites that can be accessed to each one.

Now I can't find where to link these Custom Categories with the specific policy or group. Because the Billing sites cannot be accessed by Finance and vice versa.

[support200]

If you don't bock them they don't get blocked. Did you block the category you created somewhere? What do you want to do exactly? You want to allow only one category to each group and block all other sites? Then you block everything exept the category you want to allow on Blocked Categories in a policy.

'Now I can't find where to link these Custom Categories with the specific polic' <- Did you not see the category on Blocked Categories tab in a policy?

[fabio.marques]

I think I'm not explaining this correctly.

I created a custom category called Cat-Billing and added the websites that this department can access. Websites not in this category should be blocked.
Then I created the Internet-Billing group in Active Directory, added the users, and then sent it to Nxfilter.
Now, how do I link the Cat-Billing category to the Internet-Billing group in Active Directory to allow access only to websites in this category and block the rest?

Considering that I have other departments that will also have their own specific categories.

[support200]

Did you create a policy for the group? I think in your setup, you would need to create Internet-Billing policy as well. And then you apply it to Internet-Billing group in its group edit page.

To block categories, you need to edit a policy. In Blocked Categories tab in the policy edit page, you can block categories.