Comprehensive Technical Explanation:
When evaluating a WebBlocker action, Fireware evaluates configured URL exceptions from top to bottom before consulting category definitions or falling back to the default unhandled exception behavior. In the provided WebBlocker configuration, explicit exceptions define:
1. *.facebook.com* with a Deny action. Because login.facebook.com matches this wildcard pattern, it is explicitly denied (Option F).
2. *.youtube.com* with a Deny action. The request for www.youtube.com matches this rule and is immediately denied (Option B).
3. Requests matching *.wikipedia.com* (Option A), myschool.edu regex (Option D), and watchguard.com regex (Option E) match explicit Allow exception entries and are permitted.
Crucially, the bottom fallback radio button is set to: 'If the URL does not match any exceptions: Deny website access'. When a user navigates to www.google.com, the URL fails to match any configured pattern match or regular expression rule in the list. Because the fallback condition is configured to deny unmatched URLs rather than evaluate category lists, the Firebox applies the default Deny action to www.google.com (Option C).
[Reference: WatchGuard Network Security Essentials — Networking, Policies, and NAT: WebBlocker Exceptions, Pattern Matching, and Default Match Actions., ――――――――――――――――――――――――――――――――――――――――――――――――――――――――――]
Submit