Working with the Add Criteria Window

Last updated
Save as PDF

The window for adding the rule criteria provides several functions to help you with selecting suitable criteria elements.
According to the three elements of the rule criteria, the window is divided into the following columns:

Left column for selecting a property
Middle column for selecting an operator
Right column for selecting an operand

Within a column, properties, operators, and operands are displayed in lists.

For example, you can select the following:

Left column: MediaType.EnsuredTypes
Middle column: none in list
Right column: Anti-Malware Media Type Allowlist

This creates the criteria MediaType.EnsuredTypes none in list Anti-Malware Media Type Allowlist. If you add Block as the action, you get a rule for blocking access to media of all types that have not been entered in the specified allowlist.

To help you make suitable selections, the window does the following:

Filters list according to the filter settings that you provide
Adapts lists in other columns when you select an item in one column to show only items that are suitable for being configured with the selected item
Groups lists items in the left and right columns into the categories Recommended, Suggested, and Other if this categorization is possible for the currently displayed items
Preselects two or three items (one per column) if they can be recommended for being combined with each other

Beginning with the left or right column

You can begin by selecting an item from the left or right column, depending on what you have already in mind about the criteria you are going to add.

For example, if this criteria is to be part of a rule for filtering infected web objects, you might begin by selecting the property Antimalware.Infected from the left column and then see what are suitable items to go with it. The result could be: Antimalware.Infected (property) equals (operator) true (operand).

On the other hand, if you want to include the criteria in a rule that prevents the users of your network from accessing drug-selling web sites, you might begin by selecting the URL category list Drugs as an operand and then combine it with a suitable operator and property. The result could be: URL.Categories (property) at least one in list (operator) Drugs (operand).

Left column

The list in the left column of the window allows you to select a property. The currently selected property appears at the top of the column in the Selected property field.
You can adapt the list in the following ways:

Filter the list.
- Using the Filter menu to filter according to:
  - Property type
  - Module (or engine) that is called to deliver a value for a property
  - Criteria group, such as Anti-Malware criteria, Media Type criteria, and others

NOTE: This part of the menu appears also immediately before the window opens. After selecting a criteria group, the lists in all columns show only items that are suitable for configuring the criteria of the selected group.

User-defined properties (to show only those properties)

Using a filtering term that you type in the input field below the menu
Add self-configured properties to the list using the Add User-Defined Property button and window.

The list is automatically adapted when you select an operand from the list in the right column. Then it shows only properties that are suitable for being configured with this operand.

After selecting a property, you can configure its settings and parameters if it has any. The Settings and Parameter buttons are then displayed with the property, which open windows for configuring the respective items.

Middle column

The list in the middle column of the window allows you to select an operator. The currently selected operator appears at the top of the column in the Selected operator field.

The list is automatically adapted when you select an item from the list in the left or right column. Then it shows only operators that are suitable for being configured with the selected item.

Right column

The list in the right column of the window allows you to select an operand. The currently selected operand appears at the top of the column in the Compare with field.

An operand can be a single item of different types, a list of items, or another property. Types for single operands include Boolean, String, Number, Category, and others.

You can adapt the list in the following ways:

Select an operand type (including the list and property types) from the list at the top of the column.
Only items of this type are then displayed in the main list.
(Only for lists and properties:) Filter the list using the Filter drop-down menu or the input field below.

If lists are displayed as operands, the Add <list type> and Edit <list type> buttons are provided at the bottom of the column. They open windows for adding and editing lists in the usual way.

The list is automatically adapted when you select a property from the list in the left column. Then it shows only operands that are suitable for being configured with this property.