browse
Overview
On October 6th, a new feature will be released to SIG-Essentials and SIG-Advantage based subscriptions, where web rules can be enabled or disabled. When a rule is disabled, it will not be enforced or evaluated in either the Web Policy or Web Policy Tester. Additionally, new rules created in Web Policy will be created in a disabled state and will not be enforced or evaluated until enabled.
Enabling or Disabling a Rule
Here are the steps to enable or disable a rule:
Step 1 – Create new rule
Step 2 – Enable new rule
Step 3 – Click "Update" to confirm
Rules may also be disabled using the "..." button at any time
FAQ
Q: Why are rules being created in a disabled state?
A: This was always in the original design for rulesets, but we couldn’t implement the feature until now. The benefit to having a rule in a disabled state upon creation allows the admin to configure the rule and position it in the ruleset (i.e. prioritize) appropriately before the rule takes effect. A misconfigured rule may cause unexpected and unintentional behavior.
Q: Why would I want to disable a rule?
A: Some customers have asked for the ability to make a rule inactive either for the purposes of troubleshooting their Web Policy, or because a rule is only needed temporarily but may be reused at a later time. Deleting a rule for either purpose is not desirable.
Q: Will the Web Policy Tester inform me if a disabled rule would have been enforced?
A: No. The Web Policy Tester uses the Web Policy Engine, the same engine that evaluates and enforces web rules. Disabled rules are not evaluated by the Web Policy Engine by design, and, therefore, will not be evaluated by the Web Policy Tester. This is desired for testing, troubleshooting, and planning the Web Policy.
Q: Can a disabled rule be edited, or its priority changed?
A: Yes, and this is by design. Any aspect of a rule can be changed while in a disabled state. When changing the priority order of a disabled rule, the actual evaluation of rule’s new priority won’t take effect until the rule is enabled.
Q: When enabling or disabling a rule, is the change immediate?
A: Any change to the Web Policy must be propagated throughout the Umbrella infrastructure before it will be enforced, and this applies to enabling or disabling a web rule, too.