This is an old revision of the document!

For certain features like Paypal or Facebook authentication certain web pages must be accessible before the user gets authenticated.

Best practice:

1. create an extra user role, e.g. www_free_access

Configuration > Security > Access Control > User Roles

2. add a policy

Configuration > Security > Access Control > Firewall Policies

(destination:www_free_access, service svc-http, svc,https, action: permit)

3. add domain names (Rule Type: name)

Configuration > Advanced Services > Stateful Firewall > Destinations