Behavior Rules

This section allows you to create rules for the members of your team, increasing team efficiency and productivity. For example, you can block access to game applications, or prohibit certain Internet keyword searches.

All rules when they are triggered create an alert for the Alerts report. And you can create a rule to block any type of activity, or do not block, but just collect alerts.

To establish a rule, you need to click the “create” button on the left. Next, a window will appear to create a Behavior rule. You need to give a name to the new rule, and then choose the event that will be blocked or just alerted:

  • website visited,
  • keystrokes typed,
  • application launched,
  • USB media inserted.

Select users (and user exceptions, if needed) for the rule to set up employees the rule is applied to.

You should set these options that are required and specific for each rule:

Websites

You should type masks of sites to which the rule responds are entered. E.g. http*://facebook.com*, http*://*.facebook.com. Also, 20+ content-based website categories with millions of sites are supported:
[porn], [gambling], [gaming], [dating], [file share], [threats], [proxy], [ads], [aggressive], [alcohol], [audio-video], [bitcoin], [chat], [finance], [gov], [jobs], [magazines], [mail], [medical], [news], [shopping], [social], [sports]

You may set up a Warning message to show to the user when trying to access a forbidden resource (e.g. ‘This website is prohibited. Please contact network administrator.’).

Keystrokes

To set up this rule you should write stop words that are typed by the user (e.g. CEO’s name, competitives, harmful words..):

Programs

In regard to applications, you must specify executable file names (e.g. ‘skype.exe’) or app product names (e.g. ‘skype’) you wish to prohibit, select type of “Action,” and write a warning message text that will be displayed on the user's screen when trying to run a forbidden program.

USB Removable media

USB flash can be simply blocked, or you will just be notified about the inserted USB flash drives. It depends on your decision about how to create the rule – to block or just to alert admin.

Read Next Article