I have been considering subscribing to Draytek's WCF service (Commtouch) but I am concerned about whether I can make it work the way it should.

Here's what I want to achieve:
- To have multiple WCF profiles, each applying do different users.
- To use WCF to block access to categories of sites through both http and https.
- To be able to except certain named sites from filtering by the WCF for both http and https.

Now, according to Draytek documentation, to have the WCF block sites in a given category when the user accesses them using https, the DNS filter needs to be enabled for the WCF profile. It seems to me, however, that the DNS filter can only be used with a single WCF profile: how, then, can https blocking be achieved when there are multiple WCF profiles in use?

Second, suppose I want to make an exception for a given site that belongs to a given WCF category (i.e., to allow access to just the one site, while all others in the category are to be blocked). I can add a URL Content Filter for the site, which I believe takes precedence over the WCF. The problem, however, is that the URL filter will not work with https access, so does that mean the excepted site still won't be accessible via https?

Greetings,

did you get anywhere with this one?

I have just discovered that the WCF doesnt cover https sites.
I was just thinking how neat the WCF was working

BTW enabling the DNS filter had no effect for me....

I tried the DNS filter briefly and it seemed to work, but in my case DNS is handled by a server on our network, and the Draytek DNS filter won't cooperate with that.