Keyword Category

Keyword categories referenced by URL filter, web content, web posting, and email filter can be customized.

Creating a Keyword Category

To create a keyword category, take the following steps:

1. On the Navigation pane, click Configure > Content > URL Filter/Web Content/Web Posting/Email Filter to visit the corresponding page.
2. On the Task tab in the right auxiliary pane, click Keyword Category.
3. In the Keyword Category dialog, click New.
4. In the Keyword Category Configuration dialog, type a keyword category name into the Category box.
5. Click New. Specify the keyword, keyword type (simple/regular expression), and trust value (100 by default) in the slide out area.
6. Click Add to add the keyword.
7. Repeat Step 3 to 6 to add more keywords.
8. To delete a keyword, select the keyword you want to delete from the list and click Delete.
9. Click OK to save your settings and return to the Keyword Category dialog.
10. Click Close.

Editing a Keyword Category

To edit a keyword category, take the following steps:

1. On the Navigation pane, click Configure > Content > URL Filter/Web Content/Web Posting/Email Filter to visit the corresponding page.
2. On the Task tab in the right auxiliary pane, click Keyword Category.
3. In the Keyword Category dialog, select the keyword category you want to edit from the list and click Edit.
4. In the Keyword Category Configuration dialog, modify according to your need.

Deleting a Keyword Category

To deleting a keyword category, take the following steps:

1. On the Navigation pane, click Configure > Content > URL Filter/Web Content/Web Posting/Email Filter to visit the corresponding page.
2. On the Task tab in the right auxiliary pane, click Keyword Category.
3. In the Keyword Category dialog, select the keyword category you want to delete from the list and click Delete.

Keyword Matching Rules

System will scan traffic according to the configured keywords and calculate the trust value for the hit keywords. The calculating method is: adding up the results of times * trust value of each keyword that belongs to the category. Perform the following actions according to the added up value:

• If the sum is larger than or equal to category threshold (100), the configured category action will be triggered;
• If more than one category action can be triggered and there is block action configured, the final action will be Block;
• If more than one category action can be triggered and all the configured actions are Permit, the final action will be Permit.

For example, a web content rule contains two keyword categories C1 with action block and C2 with action permit. Both of C1 and C2 contain the same keywords K1 and K2. Trust values of K1 and K2 in C1 are 20 and 40. Trust values of K1 and K2 in C2 are 30 and 80.

If the system detects 1 occurrence of K1 and K2 each on a web page, then C1 trust value is 20*1＋40*1=60<100, and C2 trust value is 30*1+80*1=110>100. As a result, the C2 action is triggered and the web page access is permitted. 

If the system detects 3 occurrences of K1 and 1 occurrence of K2 on a web page, then C1 trust value is 20*3+40*1=100, and C2 trust value C2 is 30*3+80*1=170>100. Conditions for both C1 and C2 are satisfied, but the block action for C2 is triggered, so the web page access is denied.