Conditional Policy for URL Input Field

The conditional policy for the URL input field is a feature that allows for detailed management of access permissions and isolation security policies for the created URL input field. Access can be controlled based on conditions such as members, location, and time, and various security policies can be applied.

Table of Contents

Basic

• Basic Screen Configuration
• Policy Search
• Policy Application Status Inquiry
• Get Policy

Policy Settings

• Add Policy
• Policy Basic Information- Policy Name, Members, Target
• condition- Location, Time
• Execution Policy- Access Policy, Additional Authentication
• Isolation Security Policy- Keyboard, File, Clipboard, Session, Context Menu, etc.
• Policy Settings

Management

• Policy Application Priority
• Download Policy Status
• Management of Default Execution Policy

---

Basic Screen Configuration

The conditional policy screen is composed as follows.

• Conditional Policy Tab: A tab where you can apply conditional policies to apps created in the home.
• Priority: Display policy priorities (the smaller the number, the higher the priority)
• Add Policy: Top left of the[➕ 정책 추가]Create a new policy with the button
• Search: Policy name, members, target URL/category, usage status, and various other conditions can be searched.
• Policy Application Status Inquiry: Policy List Top Button Bar[정책 적용 현황 조회]View the application history by policy and policies not applied with the button

Policy Search

You can search for policies based on various criteria, including not only the policy name but also members, target URL·category, conditions, enforcement policies, and usage status.

Types of Search Filters

Filter	Search Method	Explanation
Policy Name	Included Search	Search for policy names containing keywords
Members	Include search + dropdown selection	User (Name·Email), Group, Department Search, Assignment/Exception Classification Selection, Multiple Selection Available
Target - URL	Include Search + Dropdown Selection	Search by registered URL name and address,모든 URLSelectable fixed values, multiple selections possible
Target - Category	Dropdown Selection	Search by registered web category name
Usage	Dropdown selection	Use / Not Use Selection
condition	Include search + dropdown selection	Search by location (IP), time, and device conditions, multiple selections possible
Execution Policy	Dropdown Selection	Access Allow/Deny, Isolation Security Policy (Allow All/Restricted Use), Select Additional Authentication Methods, Multiple Selections Possible

Target Search Details

• URL Search: Enter the name or address of the registered URL, and a list will be displayed below with a partial match search.모든 URLis fixed at the bottom of the dropdown and is included in the search results only when selected directly. If searching for a specific URL, only the policies directly set for that URL will be searched,모든 URLThe policy is not included.
• Category Search: Select a web category from the dropdown. Individual URLs belonging to the category are excluded from the search targets.

Member Search Details

• When you enter a name or email in the search box, results will be displayed in real-time in a dropdown.
• 할당 / 예외You can distinguish between cases where a tab is selected and assigned to a policy and cases that are exception handled.
• 모든 구성원is fixed at the bottom of the dropdown and is included in the search results only when selected directly.

Detailed Condition Search

• Location:위치 제한 없음or enter a registered location name to search. The results are위치명 | IP 범위It will be displayed in the format.
• Time:시간 제한 없음You can search by entering the registered time name. The results are시간명 | 시간 범위It will be displayed in the format.
• Device:모든 디바이스, Desktop, Tablet, MobileSelect an option.

Execution Policy Search Details

• Access Policy: Allow Access / Block Access Selection
• Isolation Security Policy: Allow All / Select Limited Use
• Additional authentication methods: None / Email verification / OTP verification selection (applies only to access permission policies)

Search Condition Combination Rules

• Between filters (AND condition): If you set multiple different filters, only the policies that satisfy all conditions simultaneously will be displayed.
• Filter within (OR condition): When multiple items are selected within the same filter, any policy that matches at least one will be displayed.
• The conditions set are displayed in the form of tags, and the tags'×You can remove individual conditions with the button.

⚠️ Priority changes are not possible when search filters are applied. To change the priority, please clear all search filters.

Policy Application Status Inquiry

At the top of the policy list[정책 적용 현황 조회]Clicking the button opens a modal where you can view the application history of conditional policies and non-applied policies by period.

Modal Configuration

• Modal Title: Policy Application Status Inquiry
• Query Period :[시작일] ~ [종료일]Calendar Selection
• Tab: Applied Policies / Unapplied Policies
• Download: Top right[↓]Download Excel of Query Results with Button

Applied Policies Tab

to users during the specified period**Policies Actually Applied (Heating)**Displays the list.

Table Column Configuration

column	Explanation
Priority	Current priority number of the policy
Policy Name	Policy Name (Click to move to the edit details screen)
Explanation	Policy Description
Policy Usage Status	Currently in use / Not in use status
Application Count ↑↓	Number of times the policy was applied during the inquiry period (comma separated in thousands, sortable)
Recent application date ↑↓	The most recent date the policy was applied within the inquiry period (sortable)

💡 The "Application Count" and "Most Recent Application Date" columns can be sorted in ascending/descending order. When sorting the application count in ascending order, you can quickly identify policies with low usage frequency at the top.

How to use

1. [정책 적용 현황 조회]Button Click → Modal Open
2. Setting the query period (start date ~ end date)
3. 적용된 정책Check Tab
4. Sort by clicking the header of the application count or recent application date column
5. You can move to the edit detail screen of the corresponding policy by clicking the policy name.
6. top right[↓]Download Excel of Query Results by Button Click

Unapplied Policy Tab

during the set period**Policy that has never been applied (heating)**Displays the list.

Table Column Configuration

column	Explanation
Priority	Current priority number of the policy
Policy Name	Policy Name (Click to move to the edit details screen)
Explanation	Policy Description
Policy Usage Status	Currently in use / Not in use status

How to use

1. [정책 적용 현황 조회]Button Click → Modal Open
2. Setting the query period (start date ~ end date)
3. 미적용된 정책Tab Selection
4. Check the list of policies that were not applied even once during the period.
5. You can move to the edit detail screen of the corresponding policy by clicking the policy name.
6. top right[↓]Download Excel of Query Results by Button Click

💡 By periodically checking for non-applicable policies and organizing unnecessary ones, you can reduce the complexity of policy management and optimize the security environment.

Get Policy

You can import a backup of the conditional policy from a JSON file (single policy) or a ZIP file (multiple policies) to register it.

How to use

• Download: Check item checkboxes > In the top button bar[정책 다운로드]Button Click
  • When selecting 1 item: Download JSON file
  • When selecting more than 2: Download as a ZIP file
• Import:[정책 가져오기]Click the button to select and register the backed-up JSON file or ZIP file.

➕ Add Policy

[➕ 정책 추가]Clicking will take you to the new conditional policy page, where you can set the following items.

• Policy Basic Information
• condition
• Execution Policy
• Settings

📌 Policy Basic Information

Policy Name

• Name (required): Up to 20 characters allowed
• Description (optional): Up to 200 characters can be entered.

The conditional policy name is a required field, and you must enter a unique name to identify the policy.

Members

Set users or groups to be assigned or excluded from this conditional policy as members.

• Allocation
  • All users: Apply policy to all users
  • Select user or group: Search and select a specific user or group
    • Search by entering the username or group name in the search box.
    • The selected user or group can be confirmed in the box below.
• Exclusion
  • Specify users or groups to exclude from the policy
  • Excluded members are not subject to the policy regardless of assignment status.
  • The 'All Users' option cannot be used in the exclusion list.
  • If you select members to exclude, you can check the list of excluded members in the box below.

Target

Select which target to apply this conditional policy to.

Determining the Scope of Application

• All sites accessed through the address bar
  • Apply policies to all websites accessed through the URL input field
  • Used when setting basic policies such as total block or total allow.
  • Usage Example: Create a site-wide blocking policy (set with low priority), create a separate policy for specific sites to allow (set with high priority)
• 2nd Selection: Specify Specific Target (Displayed Only When Selecting Target Directly)
  • Registered Sites/Groups: Select individual sites or groups registered in the URL list. Use this when you want to apply policies to specific sites only.
    • Setting method: Click 'Select the sites registered in the address bar' → Select the desired site/group
  • Web Category: Apply policies by category. Efficient when applying uniform policies to sites of the same nature.
    • Setting method: Click 'Select a web category' → Select the desired category (e.g., Games, Entertainment, Business, Academic Information, etc.)
    • Advantages: When a new site is classified into that category, policies are automatically applied.

Policy Setting Strategy Example

• Scenario 1: Basic Blocking + Selective Allowance
  • Policy A (Priority: 2) — Target: "All sites accessed via the address bar", Enforcement Policy: Access Block
  • Policy B (Priority: 1) — Target: "Direct Selection of Target" → Business, Academic Information category, Implementation Policy: Allow Access
• Scenario 2: Differential Control by Category
  • Game/Entertainment Blocking Policy — Target: "Direct Selection of Target" → Games, Entertainment Category, Enforcement Policy: Block Access During Work Hours
  • Business Site Allowance Policy — Target: "Direct Selection of Target" → Business, Cloud Category, Enforcement Policy: Access Allowed

condition

Set conditions such as location and time to be used for policy judgment. Based on the assigned conditions, determine the user's access environment and decide whether to apply the policy.

Location Conditions

You can choose from the following two items for the location (IP) condition.

• All Locations (Default): Apply policy in all locations without specific location conditions.
  • Exception Selection: To exclude only specific locations among all locations, specify the locations to be excluded through 'Exception Selection'.
• Select Registered Location: Choose from the locations registered in the criteria section of the Security365 Management Center.
  • Click 'Select a Location' to check the list of registered locations.
  • [+위치 등록]: Click to add a new location condition
  • Exception Selection: Use 'Exception Selection' to exclude a specific location from the selected locations.

Time Condition

You can choose from the following two time conditions.

• All Time (Default): Always apply policy without any specific time limit.
  • Exception Selection: To exclude only specific time zones among all times, specify the time to be excluded through 'Exception Selection'.
• Select Registered Time: Choose from the registered times in the conditions section of the Security365 Management Center.
  • Click 'Select a Time' to check the list of registered times.
  • [+시간 등록]: Click to add a new time condition
  • Exception Selection: Use 'Exception Selection' to exclude specific time zones from the selected time.

Condition Management Notes

• The location and time conditions can be registered/deleted/edited in the [Condition Items] menu of the Security365 Management Center.
• Use exception selection to set finely when complex conditions are required.

Execution Policy

Access Policy

This conditional policy sets the access permissions when a member of the target subject wants to connect.

Access Permission

• Access Block: Completely block URL access under the specified conditions.
• Access Allowed: Allows URL access and enables the configuration of additional authentication methods.

Additional authentication methods (can be set only when access is allowed)

• Not in use: Accessing the target without additional authentication.
• Email verification: An input field for the verification code appears, and the verification proceeds.
  • Time limit: 5 minutes
  • If you did not receive the verification code in time, click 'Resend Verification Code'
• OTP Authentication: Guidance on QR code and recovery key during initial registration, proceed with authentication by entering the authentication code after registration.

⚠️ If authentication fails, a notification popup stating "Authentication has failed." will be displayed, and access to the target will not be possible.

Isolation Security Policy

Set policies to control user behavior when accessing the URL. For all behavior control items, you can choose whether to allow or block.

Behavior Control Items

• Keyboard Input: Allow/Deny Settings
  • When blocked: "Input via keyboard is prohibited by policy." notification is displayed at the bottom center.
• Site Navigation: Allow/Deny Settings
  • Allowed: Free movement to all sites
  • Block: Access not allowed outside the connected domain
  • When accessing a blocked site: Redirect to the "This action is prohibited by policy." guidance page.
• File Upload: Allow/Deny Settings
  • Additional Settings When Allowed
    • File extension restriction: Control file extensions using block / allow method (belowExtension Restrictions — Block / Allow MethodReference)
    • Repository Selection: My PC File Cabinet / SHIELDGate File Cabinet
• File Download: Allow/Deny Settings
  • When blocked: "This action is prohibited by policy. Downloading is prohibited by policy." Go to the guidance page, return to the previous screen with the close button.
  • Additional Settings When Allowed
    • File extension restriction: Control file extensions using block / allow method (belowExtension Restrictions — Block / Allow MethodReference)
    • Select Repository
      • My PC File Folder: Download files to the user's local PC
      • SHIELDGate File Box: Save files to SHIELDrive storage (storage can be specified)
      • SHIELDViewer : A feature that allows you to preview files in SHIELDViewer when downloading files.
        • Providing sub-options
          • PDF Download: Allow/Block conversion of the original to PDF (Default: Allow)
          • Download Original: Allow/Block Download of Original Document (Default: Block)
          • CDR Download: Allow/Block Download after Decontamination Processing through CDR (Default: Block)
        • Operation: A preview of SHIELDViewer opens in a new tab, displaying only the corresponding download button based on the set options.

⚠️ SHIELDGate File Cabinet (SHIELDrive Storage) Usage Precautions

• The member must be assigned to SHIELDrive storage to be available.
• Unable to download files if there is no storage allocation
• Storage allocation can be configured in the admin page by clicking on the Files menu and then selecting the Storage Management menu.

Extension Restrictions — Block / Allow Method

Select the extension control method for file upload and download.격리 보안 정책 > 파일 보안 > 파일 업로드 / 파일 다운로드ofExtension LimitationsSet in.

Selecting Extension Control Method

Select one of the two methods from the button at the top of the extension restriction.

• Block Extensions: Only the registered extensions are blocked, and all others are allowed. (Existing method)
• Allowed extensions: Only the registered extensions are allowed, and all others are blocked.

File Extension Registration

• Enter the extension one by one in the input box and**[+]**If added with a button, it will be displayed in the form of a chip.
• Enter only the file extension. For example:png ( .pngeven if you enter likepngwill be registered.)
• The input box guidance will be displayed as "Enter the blocked file extensions." / "Enter the allowed file extensions." depending on the method.
• If you enter an already added extension again, a message will be displayed saying "This extension has already been added."

⚠️ File upload and file download**Cannot be set as "Allowed Extensions" at the same time.**If one side is changed to "Allow Extensions," the other side will automatically switch to "Block Extensions."

User Guidance When Blocked

If the file is blocked due to extension restrictions, a message "Attachment Request Failed" will be displayed on the user screen, along with the following information.

• Allowed extensions: (List of extensions registered as allowed in the "Allowed Extensions" method)
• Blocked file: (blocked file name)

Clipboard Access

Controls copy/paste between the isolation browser and the user PC. If clipboard access is allowed, copy and paste can be set in 3 stages respectively.

Option	value	Action
Copy in the isolated browser	allowed	Copy from the isolated browser clipboard to the PC clipboard.
	Internal Allowance	The isolated browser only copies to the clipboard of the isolated browser and does not copy to the PC clipboard.
	Block	Copying and cutting are not allowed in the isolated browser.
Paste in Isolation Browser	allowed	You can paste the contents of the PC clipboard into the isolated browser.
	Internal Allowance	You can only paste the contents of the clipboard from the isolated browser into the isolated browser.
	Block	Cannot be pasted into the isolated browser.

• Each direction is set independently. The ability to copy → paste (internal movement) within the isolated browser is determined by the combination of the two values.
• The existing allow/block settings are each허용 / 차단It continues with. The operation of the existing policy does not change.
• 클립보드 액세스If not allowed, the entire direction setting will be disabled, and when blocked, a message "Clipboard usage is prohibited by policy." will be displayed at the bottom center.

Paste 내부 허용if set to

The PC clipboard content is not transferred to the isolated browser. Even if the user copies from the PC and pastes it,Last copied content in the isolated browser clipboardThis will be entered.

Cutting

Cutting is**Copying and pasting are both allowed.**works only in. paste차단If set to __PH_0__, cutting will also be blocked. If cutting occurs when there is no place to paste, only the original will be deleted, resulting in data loss.

Operation by Setting Combination

copy	Paste	Export	Import	Internal Movement	Cutting
allowed	allowed	O	O	O	O
allowed	Internal Allowance	O	X	O	O
allowed	Block	O	X	X	X
Internal Allowance	allowed	X	O	X	O
Internal Allowance	Internal Allowance	X	X	O	O
Internal Allowance	Block	X	X	X	X
Block	allowed	X	O	X	X
Block	Internal Allowance	X	X	X	X
Block	Block	X	X	X	X

⚠️ 복사 = 내부 허용 + 붙여넣기 = 허용In the combination, the content of the PC clipboard overwrites the isolated browser clipboard at the time of pasting, so you cannot paste content copied from the isolated browser. If internal copy and paste are needed, pasting is also내부 허용Set to.

⚠️ 복사 = 내부 허용 + 붙여넣기 = 차단The combination is saved, but you cannot paste the copied content anywhere. To prevent copying itself, you need to stop copying.차단Set to.

Session Maintenance

• Activating session persistence protects the data on the screen through the lock screen when there is no screen activity during idle time.
• Idle time setting available when activated (in minutes)
• When idle time elapses, the screen is immediately locked, and you can return to the work page through the 'Refresh' button.

Screen Marking

• Enable/Disable settings available
• When activated: Display a watermark containing information such as username and email on the screen. Enhance data leakage prevention and accountability tracking.
• The screen mark display method can be customized in the 'Business System > Security Screen Settings > Screen Marking/Watermark Settings' menu.

Print Watermark

• Available for use/not in use setting
• When activated: Display a watermark containing information such as username and email on the screen. Strengthen data leakage prevention and accountability tracking.
• The watermark display method can be customized in the 'Business System > Security Screen Settings > Screen Marking/Watermark Settings' menu.

Video Conference Mode

• Activate in work systems that require video conferencing
• Activation Restrictions: SHIELDGate shortcut function unavailable (shortcut icon in the upper right corner not provided)
• Settings for Optimizing Video Conference Performance

Context Menu

• Available for use/not in use setting
• When activated: Individually control the context menu items displayed when right-clicking in the RBI browser by target.
• Context Menu Settings > Clicking the link opens the detailed settings slide. The current setting status is summarized text (e.g:32개 표시 | 2개 숨김) is indicated.

Context Menu Detailed Settings

Individually control the ON/OFF state of menu items to be displayed for each clickable target area.

area	Explanation
Page Background Area	Context menu displayed on right-clicking empty space (Back, Forward, Refresh, Print, View Page Source, Inspect, etc.)
Text Selection Area	Menu displayed on right-click after dragging text (Copy, Print, etc.)
link	Menu displayed when right-clicking on a link (Open in new tab, Copy link address, etc.)
image	Menu displayed when right-clicking on an image (Save image, Copy image, etc.)
video	Menu displayed when right-clicking on the video (Play/Pause, Save video, etc.)
Audio	Menu displayed when right-clicking on the audio (Play/Pause, Save Audio, etc.)
Input Field	Context menu displayed on right-clicking the text input field (Cut, Copy, Paste, etc.)

• Each item within the area is controlled by an individual ON/OFF toggle,전체 ON / 전체 OFFYou can toggle all items in the area at once with the button.
• bottom초기화Clicking the button will reset all items to their default values.
• If all items in a specific area are OFF, the context menu will not be displayed when right-clicking in that area.

⚠️ Shortcut Integration: If you set the menu item to OFF, the associated keyboard shortcuts will also be blocked. (e.g.: Print item OFF →Ctrl + PBlock)

⚠️ Browser Top Button Restrictions: Even if you set the back/forward/refresh menu items to OFF, clicking the navigation buttons at the top of the browser is not blocked. Shortcuts(Alt+←, F5Only (etc.) will be blocked.

• Video/Audio: You can control the basic playback-related menu for video and audio, which is applied based on the standard context menu items of the browser.
• Shortcut keys: The browser's default shortcut keys associated with context menu items are controlled together, while custom shortcut keys are excluded.

Data Security — Sensitive Information Input Inspection

Input Prompt Firewall (formerly Custom Overlay) feature checks for sensitive information (such as regular expressions) in the text entered by the user,Before the original text is delivered to the siteControls. This item is displayed according to company settings.

Settings

• Input Sensitive Information Check (ON/OFF): This policy allows you to turn the check on or off for the target. It operates as described below depending on the check method.
• Self-Check (Regular Expression): When the check is turned ON, you can select a regular expression (choose from the list registered in sensitive information management, new additions are possible) and set the log options.
  • Log storage scope: All cases / Only blocked cases
  • User input content included: Whether to include the text entered by the user in the inspection log.
• External Integration: Only the inspection ON/OFF setting is configured, and the regular expression and log detail settings are handled by the external inspection system.

If this item (Data Security > Input Sensitive Information Check) is not visible, you need to enable the input prompt firewall. Please contact SOFTCAMP.

Core Values

• Prevention: Unlike the existing method that detects after transmission, it inspects and blocks before the input is sent externally.
• Original text not leaked: Designed to only transmit results that have passed inspection, preventing sensitive information from being sent to external services or remote screens.
• Bypass Blocking: Inspection and judgment are performed at control points rather than user local, preventing bypassing inspections through local tampering.
• Judgment·Record: It judges text·files as pass·block and leaves the entire process in the audit log.

Policy Settings

You can set the usage and validity period of this conditional policy.

Usage status

• Use: The policy is activated and takes effect immediately.
• Not in use: The policy is disabled and does not operate.

Expiration Date

• If not set: Operates indefinitely
• Expiration Date Usage: Checking the 'Expiration Date' item activates the calendar.
  • Set the period by selecting the start date and end date.
  • Policy operates only during the set period.

💡 Policy Application Priority

• If multiple policies conflict, the policy with a higher priority (a smaller number) will be applied.
• You can adjust the priority by dragging and dropping in the policy list.
• If multiple policies are set for the same conditions, the most restrictive policy takes precedence.
• Policy priorities are important for the effective management of policies, so they should be set carefully.

Priority Quick Move

After selecting a policy, you can quickly change the priority using the following method.

• Move to Top / Move to Bottom: Move instantly to the very top or very bottom
• Priority Move Dropdown: Select the desired number to move directly to a specific position.

⚠️ Priority changes are not possible when search filters are applied. Please proceed after clearing all filters.

Download Policy Status

You can download the list of conditional policies as an Excel (.xlsx) file. This is provided separately from the existing JSON backup feature.

• Download All: Save all registered policy information as an Excel file
• Download Search Results: Save only the results with the current search filter applied as an Excel file.

💡 JSON download is for policy backup and restoration, while Excel download is used for status analysis and reporting purposes.

Management of Default Execution Policy

This is a feature that allows you to pre-set and manage the default values automatically filled in the execution policy and isolation security policy items when registering a new conditional policy. It reduces repetitive manual settings and prevents setting omissions and input errors.

Accessing the Default Value Management Screen

Top button bar on the right side of the policy list[집행정책 기본값 관리]Click the button.

[+ Policy Registration]  ...  [Execution Policy Default Management]

※ The URL input field and the app's default values are managed independently. Changing the default value in one menu does not affect other menus.

Default Value Setting Range

The items that can be set in the default value management screen are as follows.

item	Whether to apply default values	Note
Policy Name / Description	❌	Unique input for each policy
Members / Target	❌	Unique designation for each policy
Condition (Location·Time)	❌	Set directly for each policy
Execution Policy (Access Policy · Additional Authentication)	✅
Isolation Security Policy (Keyboard, File, Clipboard, Session, Context Menu, etc.)	✅
Settings (Usage Status · Validity Period)	❌

Save Default Value

After setting the execution policy and isolation security policy items in the default value management screen[저장]Click the button.

Action	result
[저장]Click	The current settings are saved as the default values for this menu. They will be automatically applied when registering a new policy.
[취소]Click	Return to the list screen without saving changes
Default value not set state (initial)	Display in system initial value (fully allowed, not set) state

Automatic application upon registering a new policy

[+ 정책 등록]When clicked, the execution policy and isolation security policy items are automatically filled with the default values saved. Enter the policy name, members, targets, and conditions, and register by modifying only the necessary items.

status	Action
When a default value is set	Execution Policy · Isolation Security Policy has been reset to default.
If no default value is set	Initialize to system default values (same as existing operation)
If manually modified after automatic application	The modified value takes precedence and does not affect the default value.

※ Automatic application only applies to initial value settings upon new registration. It does not affect existing saved policies.

Apply default values in bulk to the selected policy

After selecting the policy with checkboxes in the list, the top button bar of[집행정책 기본값 적용]By clicking the button, you can overwrite the execution policy and isolation security policy items of the selected policy with the current default values.

How to use

1. Select the checkbox for the policy to apply the default value from the list.
2. in the top button bar[집행정책 기본값 적용]Click the button.
3. Check the default values to be applied in the confirmation dialog (execution policy · isolation security policy summary).
4. [기본값 적용]When you click the button, the default values for the selected policy will be applied immediately.

⚠️ The application of default values is saved immediately. Policy name, description, members, targets, conditions, and settings are not changed.

⚠️ If no default value is set, the system's initial value will be applied.