What's the order of operations on how an MX filters or allows a website?

Solved
ShadowoftheDark
Getting noticed

What's the order of operations on how an MX filters or allows a website?

Hi,

 

I'd like to know how an MX filters or allows a website whenever a user tries to access it.

 

Let's say I have a user and she wants to access www.instagram.com.

 

How does MX decide if she's allowed to access it or not? 

 

What's the order on how MX checks if she's allowed to access the website?

 

I have created a diagram below to further illustrate my point although I might be forgetting other filtering methods. Please let me know.

 

ShadowoftheDark_0-1660146821441.png

 

 

Thanks

 

 

1 Accepted Solution
PhilipDAth
Kind of a big deal
Kind of a big deal
4 Replies 4
CptnCrnch
Kind of a big deal
Kind of a big deal

Looks pretty much spot on from my point of view.

Oh, I didn't think that was the order it checks if the website is allowed I just put it randomly in there. 

 

Is that really the correct order when it checks a website (Group Policy --> Firewall Rules (Ooutbound), Firewall Rules (Layer 7),etc..)?

 

Also, is there a way to check which is causing the blockage? 

 

In the logs I can only see the following causes:

 

- Content Filtering (doesn't say if its Category Blocked or URL Blocked though, doesn't say if its from GP as well)

- Firewall Blocked (doesn't say what rule)

 

Thanks

PhilipDAth
Kind of a big deal
Kind of a big deal

Thanks, I'll check it out.

Get notified when there are additional replies to this discussion.