Assign Exception
Navigate to the sidebar menu: Protection > Policies, and click + Assign exception groupsbutton.
Overview
Creating an exception list (Allow List or Block List) is not enough to activate it. You must explicitly assign that list to a policy. This modular approach allows you to reuse the same "Global Allow List" across multiple different policies (e.g., for different offices) without having to recreate the domains every time.
Interface Overview
The assignment window is a focused modal designed for quick selection.
Interface Element | Focus & Description |
|---|---|
Selection Field | Click here to see all available exception groups. You can select multiple lists simultaneously (e.g., both a "Global Allow List" and a "Marketing Block List"). |
Checkmarks (✓) | A blue checkmark next to a list name indicates it is currently selected for this policy. |
+ Create new exception group | If you haven't created the list yet, use this button to define a new group on the fly without leaving the screen. |
Assign | The blue button confirms the link. The policy will immediately start using the domains in the selected lists. |
Configuration & Logic
Exception Groups must be created before they can be assigned to a DNS filtering policy. Make sure the required groups already exist before configuring your policy exceptions.
Note: Assigning an Exception Group is optional. You can save a DNS filtering policy without linking any Exception Groups and add them later if needed.
Select Your Groups
Click inside the input box. A dropdown list of all your available Exception Groups will appear.
- To Add: Click on the group name. It will appear as a "chip" (tag) inside the box.
- To Remove: Click the "X" icon next to the group name tag to unlink it.
Confirm Assignment
Once you have selected all the necessary lists (Allow and Block), click the blue Assign button at the bottom right.
Important Priority Logic
- Allow Lists (Whitelists) always take priority over Block Lists (Blacklists).
- Exception Lists always take priority over Content Filtering Categories.
Example: If you block "Social Networks" in the main policy but add facebook.com to an assigned Allow List, Facebook will be accessible.