Protection
...
Policies Exceptions
Assign Exception
3 min
navigate to the sidebar menu docid 5vkvzyeveco0n cz4p54q > docid\ ytrytsh3od3lc 34gvaz1 , and click + assign exception groups + assign exception groups button overview creating an exception list (allow list or block list) is not enough to activate it you must explicitly assign that list to a policy this modular approach allows you to reuse the same "global allow list" across multiple different policies (e g , for different offices) without having to recreate the domains every time interface overview the assignment window is a focused modal designed for quick selection interface element focus & description selection field click here to see all available exception groups you can select multiple lists simultaneously (e g , both a "global allow list" and a "marketing block list") checkmarks (✓) a blue checkmark next to a list name indicates it is currently selected for this policy + create new exception group + create new exception group if you haven't created the list yet, use this button to define a new group on the fly without leaving the screen assign assign the blue button confirms the link the policy will immediately start using the domains in the selected lists configuration & logic 1\ select your groups click inside the input box a dropdown list of all your available exception groups will appear to add click on the group name it will appear as a "chip" (tag) inside the box to remove click the "x" icon next to the group name tag to unlink it 2\ confirm assignment once you have selected all the necessary lists (allow and block), click the blue assign assign button at the bottom right important priority logic allow lists (whitelists) always take priority over block lists (blacklists) exception lists always take priority over content filtering categories example if you block "social networks" in the main policy but add facebook com to an assigned allow list, facebook will be accessible