Netgear STM300 ProSecure Web and Email Threat Management Appliance Reference Manual

Setting Access Exception Rules for Web Access

You can set up to 200 exception rules for users and members of a group to allow access to 
applications, file extensions and protocols, Web categories, and URLs that you have blocked 
for all other users, or the other way around, to block access to applications, file extensions 
and protocols, Web categories, and URLs that you have allowed access to for all other users.

If you have not created a custom group, an exception rule can apply to either one of the 
following groups or individual users:

All users

All authenticated users

All unauthenticated users

A local group or local user

A group or users that is defined by its IP address

A Lightweight Directory Access Protocol (LDAP) group or LDAP user

A RADIUS VLAN group

To further refine exception rules, you can create custom groups that allow you to include a 
combination of local groups and local users, groups and users that are defined by their IP 
address, LDAP groups and users, and RADIUS groups and users. For more information, see 

Users and groups to which access exception rules apply are not the 

same as LAN groups. For information about how to specify 
members of a LAN group and to customize LAN group names, see 

If you have not created a custom category, an exception rule can apply to either one of the 
following components:

One built-in application group or built-in individual application

A combination of files extensions and protocols

One URL or URL expression

One built-in Web category group or built-in individual Web category

To further refine exception rules, you can create custom categories that allow you to include 
either a selection of applications, or a selection of URLs, or a selection of Web categories. 
For more information, see 

If you want to use a custom group and custom category, first create the 

custom group and custom category, then create the exception rule.