alert

—Allows access to the web site but adds an alert to the URL log each time a user accesses the URL.

allow

—Allows access to the web site.

block

—Blocks access to the web site. If the Site Access to a URL category is set to block, the User Credential Submission permissions is automatically also set to block.

continue

—Displays a page to users that to warn them against continuing to access the page. To access the web site, the user must click

Continue

.

override

—Displays a response page that prompts the user to enter a valid password in order to gain access to the site. Configure URL Admin Override settings (

Device

Setup

Content ID

) to manage password and other override settings. (See also the Management Settings table in Device > Setup > Content-ID).

none

(

custom URL category only

)—If you have created custom URL categories, set the action to

none

to allow the firewall to inherit the URL filtering category assignment from your URL database vendor. Setting the action to

none

gives you the flexibility to ignore custom categories in a URL filtering profile, while allowing you to use the custom URL category as a match criteria in policy rules (Security, Decryption, and QoS) to make exceptions or to enforce different actions. To delete a custom URL category, you must set the action to

none

in any profile where the custom category is used. For information on custom URL categories, see Objects > Custom Objects > URL Category.

alert

—Allow users to submit credentials to the website, but generate a URL Filtering log each time a user submits credentials to sites in this category.

allow

(default)—Allow users to submit credentials to the website.

block

—Block users from submitting credentials to the website. A default anti-phishing response page blocks user credential submissions.

continue

—Display a response page to users that prompts them to select Continue to submit credentials to the site. By default, an anti-phishing continue page displays to warn users when they attempt to submit credentials to sites to which credential submissions are discouraged. You can choose to create a custom response page to warn users against phishing attempts or to educate them against reusing valid corporate credentials on other websites.