Allow exe download from one site for one group

[ashaw216]

We have a group of developers who is taking training on a website that apparently loads it through an exe. We need to allow members of a group to access exe but only for one domain. How would this be done without removing the exe download block from the Application type?

[Ken Stieers · Accepted solution]

Create a custom URL category that includes the site you need.

Create an access policy that uses the AD group, AND the custom category as part of the "Group" (have to click on Advanced to see the place to add the category)

Use "global policy" for each one except objects, and open up EXE's there.

Apply/commit..