1. In the Forefront TMG Management console, in the tree, click the Web Access Policy node.

2. In the Tasks pane, click Configure Web Access Policy.

3. Follow the steps in the Web Access Policy Wizard.

4. On the Web Access Policy Rules page, you can allow Forefront TMG to create a default rule blocking access to Web sites that have been categorized as malicious.

   Note:
   On the Blocked Web Destinations page, you can block access to all types of network entities, including URL categories and URL category sets. To configure your access policy quickly, use URL category sets, which combine similar URL categories. If required, you can add specific domains and other Web destinations.

5. After completing the wizard, on the Apply Changes bar, click Apply.

You can further customize the Web access policy by editing the rules you have created. See Configuring Web access rule options for details.

Configuring malware inspection

Concepts