Skip to main content

Conditional Policy for URL Input Field

The conditional policy for the URL input field is a feature that allows for detailed management of access permissions and isolation security policies for the created URL input field. Access can be controlled based on conditions such as members, location, and time, and various security policies can be applied.

Table of Contents​

Basic

Policy Settings

Management

Basic Screen Layout​

The conditional policy screen is composed as follows:

  1. Conditional Policy Tab: A tab where you can apply conditional policies to apps created on the home page.
  2. Priority: Display policy priorities (the smaller the number, the higher the priority)
  3. Add Policy: Top left**[➕ Add Policy]**Create a new policy with a button
  4. Search: Searchable by various criteria such as policy name, members, target URL/category, usage status, etc.
  5. Policy Application Status Inquiry: Top button bar of the policy list**[Policy Application Status Inquiry]**View application history by policy and policies not applied with the button.

You can search for policies based on various criteria, including not only the policy name but also members, target URL·category, conditions, enforcement policies, and usage status.

Types of Search Filters​

FilterSearch MethodDescription
Policy NameIncluded SearchSearch for policy names containing keywords
MembersInclusive Search + Dropdown SelectionUser (Name·Email), Group, Department Search, Assignment/Exception Classification Selection, Multiple Selection Available
Target - URLInclusive Search + Dropdown SelectionSearch by registered URL name and address,모든 URLSelectable fixed values, multiple selections possible
Target - CategoryDropdown SelectionSearch by registered web category name
UsageDropdown SelectionUse / Not Use Selection
conditionInclusive Search + Dropdown SelectionSearch by location (IP), time, and device conditions, multiple selections available
Execution PolicyDropdown SelectionAccess Allow/Deny, Isolation Security Policy (Allow All/Restricted Use), Select Additional Authentication Methods, Multiple Selections Possible

Target Search Details​

URL Search:

  • If you enter the name or address of the registered URL, a list will be displayed below as a result of the inclusion search.
  • 모든 URLis fixed at the bottom of the dropdown and is included in the search results only when selected directly.
  • When searching for a specific URL, only the policies directly set for that URL will be searched, and모든 URLPolicies are not included.

Category Search:

  • Select the web category from the dropdown. Individual URLs belonging to the category will be excluded from the search targets.

Member Search Details​

  • When you enter a name or email in the search box, results are displayed in real-time in a dropdown.
  • Allocation / ExceptionYou can search by distinguishing between cases where a tab is selected and cases where exceptions are handled.
  • 모든 구성원is fixed at the bottom of the dropdown and is included in the search results only when selected directly.
  • Location: 위치 제한 없음or enter a registered location name to search. The results are위치명 | IP 범위It will be displayed in the format.
  • time: 시간 제한 없음You can search by entering a registered time name. The results are시간명 | 시간 범위It will be displayed in the format.
  • Device: 모든 디바이스, Desktop, Tablet, MobileSelect 중.

Execution Policy Search Details​

  • Access Policy: Select Allow Access / Block Access
  • Isolation Security Policy: Allow all / Select limited use
  • Additional authentication methods: Not used / Email verification / OTP verification selection (applies only to access permission policy)

Search Condition Combination Rules​

  • **Between filters (AND condition)**If you set multiple different filters, only the policies that satisfy all conditions simultaneously will be displayed.
  • **Within Filter (OR Condition)**If you select multiple items within the same filter, any matching policies will be displayed.
  • Each set condition is displayed in the form of tags, and the tags'×You can remove individual conditions with the button.

⚠️ Priority changes are not possible when search filters are applied. To change the priority, please clear all search filters.

Policy Application Status Inquiry​

At the top of the policy list**[Policy Application Status Inquiry]**Clicking the button opens a modal where you can view the application history of conditional policies and the policies not applied by period.

Modal Title: Policy Application Status Inquiry

AreaContent
Query Period[시작일] ~ [종료일]Calendar Selection
tabApplied Policies / Unapplied Policy
Downloadtop right[↓]Download Excel of Query Results with Button

Applied Policies Tab​

to the user during the specified period**Policies Actually Applied (Heating)**Displays a list.

Table Column Configuration​

columnDescription
PriorityCurrent priority number of the policy
Policy NamePolicy Name (click to move to edit details screen)
DescriptionPolicy Description
Policy Usage StatusCurrently in use / Not in use
Application Frequency ↑↓Number of times the policy was applied during the inquiry period (thousand unit comma display, sortable)
Recent application date ↑↓The most recent date when the policy was applied within the inquiry period (sortable)

💡 Application CountWowRecent application dateColumns can be sorted in ascending/descending order. When sorting by application frequency in ascending order, policies with lower usage frequency can be quickly identified at the top.

How to use​

  1. **[Policy Application Status Inquiry]**Button Click → Open Modal
  2. Setting the query period (start date ~ end date)
  3. Applied PoliciesCheck Tab
  4. Sort by clicking the header of the application frequency or most recent application date column.
  5. Clicking on the policy name allows you to navigate to the edit detail screen of that policy.
  6. top right[↓]Download Excel Results by Clicking the Button

Unapplied Policies Tab​

during the set period**Policy that has never been applied (heating)**Displays a list.

Table Column Configuration​

columnDescription
PriorityCurrent priority number of the policy
Policy NamePolicy Name (click to move to edit details screen)
DescriptionPolicy Description
Policy Usage StatusCurrently in use / Not in use

How to use​

  1. **[Policy Application Status Inquiry]**Button Click → Open Modal
  2. Setting the query period (start date ~ end date)
  3. Unapplied PolicyTab Selection
  4. Check the list of policies that have not been applied even once during the specified period.
  5. Clicking on the policy name allows you to navigate to the edit detail screen of that policy.
  6. top right[↓]Download Excel Results by Clicking the Button

💡 By periodically checking for non-applicable policies and organizing unnecessary ones, you can reduce policy management complexity and optimize the security environment.

Fetch Policy​

  • You can import and register a backup JSON file (single policy) or a ZIP file (multiple policies) for the conditional policy.

[How to Use]

  1. Download: Check the item checkbox > Click the [Download Policy] button on the top button bar.
    • Download JSON file when selecting 1 item
    • When selecting 2 or more: Download as a ZIP file.
  2. Import: Click the [Import Policy] button to select and register the backed-up JSON file or ZIP file.

➕ Add Policy​

**[➕ Add Policy]**Clicking will take you to the new conditional policy page, where you can set the following items:

  • Basic Policy Information
  • condition
  • Execution Policy
  • Settings

📌 Basic Policy Information​

Policy Name​

  • Name(required): Up to 20 characters can be entered
  • Description(Optional): Up to 200 characters can be entered.
  • The conditional policy name is a required field, and you must enter a unique name to identify the policy.

Members​

Set users or groups to include or exclude in this conditional policy.

Allocation

  • All Users: Apply policies to all users
  • Select User or Group: Search and select a specific user or group
    • Search by entering a username or group name in the search box.
    • The selected user or group can be confirmed in the box below.

Exclusion

  • Specify users or groups to exclude from the policy
  • Excluded members are not subject to the policy regardless of allocation.
  • The 'All Users' option cannot be used in exclusions.
  • You can check the list of excluded members in the box below by selecting the members to exclude.

Target​

Select which targets to apply this conditional policy to.

Determining the Scope of Application​

All sites accessed through the address bar

  • Apply policies to all websites accessed through the URL input field
  • Used when setting basic policies such as block all or allow all.
  • Usage Examples:
    • Create a site-wide blocking policy (set priority low)
    • Specific sites allowed are created with separate policies (set with high priority)

Secondary Selection: Specify Specific Target (Displayed Only When Selecting Target Directly)​

Registered Sites/Groups

  • Select individual sites or groups registered in the URL list
  • Used when you want to apply a policy only to a specific site.
  • How to Set Up:
    • Click 'Select the sites registered in the address bar'
    • Select Desired Site/Group

Web Category

  • Apply policies by category
  • Efficient when applying uniform policies to sites of the same nature.
  • How to Set Up:
    • Click 'Select a web category'
    • Select the desired category (e.g., Games, Entertainment, Business, Academic Information, etc.)
  • Advantages: When a new site is classified into that category, policies are automatically applied.

Example of Policy Setting Strategy​

Scenario 1: Basic Blocking + Selective Allowance

  1. Policy A (Priority: 2):
    • Target: "All sites accessed via the address bar"
    • Enforcement Policy: Access Blocking
  2. Policy B (Priority: 1):
    • Target: "Direct Selection of Target" → Business, Academic Information category
    • Execution Policy: Access Allowance

Scenario 2: Differential Control by Category

  1. Game/Entertainment Blocking Policy:
    • Target: "Direct Selection of Target" → Games, Entertainment category
    • Execution Policy: Blocking Access During Work Hours
  2. Work Site Allowance Policy:
    • Target: "Direct Selection of Target" → Business, Cloud Category
    • Execution Policy: Access Allowance

condition​

Set conditions such as location and time to be used for policy judgment. Based on the assigned conditions, determine the user's access environment and decide whether to apply the policy.

Location Conditions​

You can choose from the following two items for the location (IP) condition:

  • All Locations(default): Apply policy at all locations without specific location conditions
    • Exception Selection: To exclude only specific locations among all locations, specify the locations to be excluded through 'Exception Selection'.
  • Select Registered LocationSelect from the locations registered in the Security365 Management Center's condition items.
    • Click 'Select a Location' to view the list of registered locations.
    • [+Register Location]: Click to add a new location condition
    • Exception Selection: Use 'Exception Selection' to exclude specific locations from the selected locations.

Time Conditions​

You can choose from the following two time conditions:

  • all time(default): Always apply the policy without any specific time limit.
    • Exception Selection: To exclude only specific time zones among all times, specify the time to be excluded through 'Exception Selection'.
  • Registered Time Selection: Select from the registered time in the conditions section of the Security365 Management Center.
    • Click 'Select a time' to check the list of registered times.
    • [+Register Time]: Click to add a new time condition
    • Exception Selection: Use 'Exception Selection' to exclude a specific time zone from the selected time.

Condition Management Notes

  • The location and time conditions can be registered/deleted/edited in the [Condition Items] menu of the Security365 Management Center.
  • Use exception selection for detailed settings when complex conditions are required.

Execution Policy​

Access Policy​

This sets the access permissions when a member of the subject to this conditional policy wants to connect.

Access Permission Status

  • Access Denied: Completely block URL access under the given conditions
  • Access Permission: Allows URL access and enables the configuration of additional authentication methods.

Additional authentication methods(Only configurable when access is allowed)

  • Not in use: Accessing the target without additional authentication
  • Email Verification:
    • An input field for the authentication code appears, and the authentication process begins.
    • Time limit: 5 minutes
    • If you did not receive the authentication code in time, click 'Resend Authentication Code'
  • OTP Authentication:
    • Instructions for QR Code and Recovery Key during Initial Registration
    • Enter the authentication code after registration to proceed with authentication.

⚠️ When authentication fails

  • "Authentication has failed." Display alert popup
  • Unable to access the target

Isolation Security Policy​

Set policies to control user behavior when accessing the URL. For all behavior control items, you can choose whether to allow or block.

Behavior Control Items​

Keyboard Input

  • Allow/Deny Settings
  • When blocked: "Input via keyboard is prohibited by policy." notification is displayed at the bottom center.

Site Navigation

  • Allow/Deny Settings
  • Allowed: Free movement to all sites
  • Block: Access not allowed from domains other than the connected domain
  • When accessing a blocked site: Redirect to the "This action is prohibited by policy." information page.

File Upload

  • Allow/Deny Settings
  • Additional settings when allowed:
    • File Extension Restrictions: Select allowed file extensions (e.g., jpg, png, pdf, etc.)
    • Repository Selection:
      • My PC File Cabinet
      • SHIELDGate File Box

File Download

  • Allow/Deny Settings
  • When blocked: "This action is prohibited by policy. Downloading is prohibited by policy." Redirect to the information page, return to the previous screen with the close button.
  • Additional settings when allowed:
    • File Extension Restrictions: Select allowed file extensions
    • Repository Selection:
      • My PC File Cabinet: Downloading files to the user's local PC
      • SHIELDGate File Box: Saving files to SHIELDrive storage (storage can be specified)
      • SHIELDViewer: A feature to preview and view files using SHIELDViewer when downloading files.
        • Providing Sub-options:
          • Download PDF: Allow/Block downloading of the original as a PDF (Default: Allow)
          • Download Original: Allow/Block downloading of original document (default: Block)
          • Download CDR: Allow/Block downloads after neutralization processing through CDR (Default: Block)
        • How It Works: A preview of SHIELDViewer opens in a new tab, displaying only the corresponding download button based on the set options.

⚠️ Precautions for Using SHIELDGate File Box (SHIELDrive Storage)

  • The member must be assigned to SHIELDrive storage to be available.
  • Unable to download files if there is no storage allocation
  • Storage allocation can be done by clicking on the Files menu in the admin page.스토리지 관리It can be set in the menu.

Clipboard Access

  • Control of Copy/Paste Between Isolated Browser and User PC
  • Individual settings available by direction:
    • Whether to allow clipboard access from the isolated browser to the user's PC
    • Allowing Clipboard Access in Isolated Browser on PC
  • When blocked: "Clipboard usage is prohibited by policy." notification is displayed at the bottom center.

Session Persistence

  • Enabling session persistence protects the data on the screen through the lock screen when there is no screen activity during idle time.
  • Idle time setting available when activated (in minutes)
  • When idle time elapses, the screen will be locked immediately, and you can return to the work page through the 'Refresh' button.

Screen Marking

  • Enable/Disable Settings Available
  • When activated: Display a watermark on the screen containing username, email information, etc.
  • Data Leakage Prevention and Enhanced Accountability Tracking
  • The screen mark display method can be customized in the menu 'Business System > Security Screen Settings > Screen Marking/Watermark Settings'.

Print Watermark

  • Enable/Disable settings available
  • When activated: Display a watermark on the screen containing username, email information, etc.
  • Data Leakage Prevention and Enhanced Accountability Tracking
  • The watermark display method can be customized in the 'Business System > Security Screen Settings > Screen Marking/Watermark Settings' menu.

Video Conference Mode

  • Activated in work systems that require video conferencing
  • Limitations when activated:
    • Unable to use the SHIELDGate shortcut feature (shortcut icon not provided in the upper right corner)
    • Settings for Optimizing Video Conference Performance

Context Menu

  • Enable/Disable settings available
  • When activated: Individually control the context menu items displayed when right-clicking in the RBI browser by target.
  • 컨텍스트 메뉴 설정 >Clicking the link will open the detailed settings slide.
  • The current configuration status is summary text (e.g:32개 표시 | 2개 숨김) is indicated.

Context Menu Detailed Settings

Individually control the menu items to be displayed for each clickable target area by turning them ON/OFF.

AreaDescription
Page Background AreaMenu displayed when right-clicking on empty space (Back, Forward, Refresh, Print, View Page Source, Inspect, etc.)
Text Selection AreaContext menu displayed after right-clicking on text after dragging (copy, print, etc.)
linkMenu displayed when right-clicking on a link (Open in new tab, Copy link address, etc.)
imageMenu displayed when right-clicking on an image (Save image, Copy image, etc.)
VideoMenu displayed when right-clicking on the video (Play/Pause, Save Video, etc.)
AudioMenu displayed when right-clicking on audio (Play/Pause, Save Audio, etc.)
Input FieldContext menu displayed on right-clicking the text input field (Cut, Copy, Paste, etc.)
  • Each item within the area is controlled by an individual ON/OFF toggle,전체 ON / 전체 OFFYou can toggle all items in the area at once with a button.
  • bottom초기화Clicking the button will reset all items to their default values.
  • If all items in a specific area are OFF, the context menu will not be displayed when you right-click in that area.

⚠️ Shortcut Key IntegrationIf you set the menu item to OFF, the associated keyboard shortcuts will also be blocked. (e.g., Print item OFF →Ctrl + PBlock)

⚠️ Top Button Constraints in Browser: Setting the back/forward/refresh menu items to OFF does not block clicks on the navigation buttons at the top of the browser. Shortcut keys (Alt+←, F5Only (etc.) will be blocked.

Video/AudioYou can control the basic playback-related menu for video and audio, which is applied based on the standard context menu items of the browser.

Shortcut KeysThe browser's default shortcuts associated with context menu items are controlled together, while custom shortcuts are excluded.

Policy Settings​

You can set the usage and validity period of this conditional policy.

Usage status​

  • use: The policy is activated and works immediately
  • Not in use: The policy is disabled and not functioning.

Expiration Date​

  • When not set: Operate indefinitely
  • Expiration Date Usage:
    • Checking the 'Expiration Date' item activates the calendar.
    • Set the period by selecting the start date and end date.
    • Policy operates only during the set period.

💡 Policy Application Priority​

  • When multiple policies conflict, the policy with the higher priority (the smaller number) is applied.
  • You can adjust the priority by dragging and dropping in the policy list.
  • If multiple policies are set for the same conditions, the most restrictive policy takes precedence.
  • Policy priorities should be set carefully as they are important for the effective management of policies.

Priority Quick Navigation​

After selecting a policy, you can quickly change the priority using the following method.

  • Move to top / Move to bottom: Move immediately to the top or bottom
  • Priority Move Dropdown: Select the desired number to move directly to a specific location.

⚠️ Priority changes are not possible when search filters are applied. Please clear all filters before proceeding.

Download Policy Status​

You can download the list of conditional policies as an Excel (.xlsx) file. This is provided separately from the existing JSON backup feature.

  • Download All: Save all registered policy information as an Excel file
  • Download Search Results: Save only the results with the current search filter applied as an Excel file

💡 JSON download is for policy backup and restoration, while Excel download is used for status analysis and reporting purposes.

Management of Default Execution Policies​

This is a feature that allows you to pre-set and manage default values that are automatically filled in the execution policy and isolation security policy items when registering a new conditional policy. It reduces repetitive manual settings and prevents omissions and incorrect inputs.

Accessing the Default Value Management Screen​

Right side of the top button bar of the policy list**[Managing Default Values for Execution Policies]**Click the button.

[+ 정책 등록]  ...  [집행정책 기본값 관리]

※ The URL input field and the app's default values are managed independently. Changing the default value in one menu does not affect other menus.

Default Value Setting Range​

The items that can be set in the default value management screen are as follows.

itemWhether to apply default valuesNote
Policy Name / Description❌Unique input for each policy
Members / Target❌Unique designation for each policy
Conditions (Location·Time)❌Directly set for each policy
Execution Policy(Access Policy · Additional Authentication)✅
Isolation Security Policy(keyboard, file, clipboard, session, context menu, etc.)✅
Settings (Usage Status · Validity Period)❌

Save Default Value​

After setting the execution policy and isolation security policy items on the default value management screen,**[Save]**Click the button.

Actionresult
**[Save]**ClickThe current settings are saved as the default values for this menu. They will be automatically applied when new policies are registered.
**[Cancel]**ClickReturn to the list screen without saving changes
Default value not set (initial)Display in system initial value (fully allowed, not set) status

Automatically applied when registering a new policy​

**[+ Register Policy]**When clicked, the execution policy and isolation security policy items are automatically filled with the default values. Enter the policy name, members, targets, and conditions, and register by modifying only the necessary items.

StatusAction
When a default value is setExecution Policy · Isolation Security Policy has been reset to default.
If no default value is setInitialize to system default values (same as existing operation)
If manually modified after automatic applicationThe modified value takes precedence and does not affect the default value.

※ Automatic application only applies to the initial value setting during new registration. It does not affect existing saved policies.

Apply Default Values to Selected Policies​

After selecting the policy with checkboxes in the list, use the top button bar.**[Applying Default Execution Policy]**By clicking the button, you can overwrite the execution policy and isolation security policy items of the selected policy with the current default values.

How to use

  1. Select the checkbox for the policy to apply the default value from the list.
  2. in the top button bar**[Applying Default Execution Policy]**Click the button.
  3. Check the default values to be applied in the confirmation dialog (execution policy · isolation security policy summary).
  4. **[Apply Default]**Clicking the button will immediately apply the default values to the selected policy.

⚠️ The application of default values is saved immediately. Policy name, description, members, targets, conditions, and settings are not changed.
⚠️ If no default value is set, the system's initial value will be applied.