Technical Tip: How to block all, except some URLs

[Sasha_FTNT]

Description
This article explains how to use Web-filter to create a white list of HTTP(S) resource, and block rest of the sites. 

Solution
Normal behavior would be to have some entries with allowed status and one wildcard ‘*’ with block.
For some internet resources, such wildcard will broke TLS/SSL handshake. It is much better to use regexp in form ‘[^.]’ .

Please have a look at sample profile:

#config webfilter urlfilter
edit 1
set name "default"
config entries
edit 1
set url "sample.com"
set action allow
next
edit 2
set url "[^.]"
set type regex
set action block
next
end