A URL filter blocks a category that contains a payroll site the staff must use. Every other site in that category should stay blocked. The payroll site is not on the allow list. What should be added?
Select an answer to reveal the explanation.
Short Explanation
The category rule is doing its job, and the one site you still need was never excepted. You allow that payroll site ahead of the category block. Taking the whole category off the filter permits every site you meant to stop.
Full Explanation
URL filtering matches an allow list before, or instead of, a category block when the allow entry is ordered to win. The payroll site sits in a blocked category and has no allow entry, so it is denied with the rest. Add an allow for that site and keep the category block for everything else. Removing the category block opens the whole category, which the policy forbids. An OMP preference only changes the path. It does not exempt a URL from a security filter. A strict SLA drops or forwards on path quality. It does not permit a URL the filter has already blocked. Exam caveat: a host-only allow can miss the site if staff use a different name that still lands in the category. Allow the names they actually use. Operational check: the payroll site should hit the allow counter, and another site in the same category should still hit the block.