Policy Exceptions

navigate to the sidebar menu protection docid\ aoavaxbxic2kmejwxc3pi > policies docid\ i3yd tv8604vqf9jt7 cc , open a standard policy and select the exceptions tab in the top navigation bar overview the exceptions module serves as the final authority in your filtering hierarchy it allows you to assign specific allow lists (whitelists) or block lists (blacklists) to override the general rules set in the malware, content, or application modules example you can block the entire "social networks" category in the content tab but add a specific exception to allow access to linkedin for the hr department interface overview the interface is designed to manage the link between your policy and your custom domain lists \<font color="#111827">interface element\</font> focus & description search bar located at the top left allows you to quickly find a specific exception group already assigned to this policy \<font color="#2563eb">`+ assign exception groups`\</font> the blue \<font color="#2563eb">`+ assign exception groups`\</font> button allows you to attach a new list to this policy list view once groups are assigned, they will appear in the main area below the search bar (currently empty in the view) understanding exception types exceptions are managed via "groups" (lists of domains) use this table to understand the two main types of overrides you can apply exception type function & priority allow list (whitelist) domains in this list are always accessible , even if they fall under a blocked category (e g , malware or social networks ) this is primarily used to fix false positives or grant specific access block list (blacklist) domains in this list are always blocked , even if the category they belong to is generally allowed this is used to block specific unwanted sites without restricting the entire category subdomains and cdns when adding exceptions, remember that modern websites often load content from multiple sources subdomains ensure you consider whether you need to allow just example com or also drive example com cdns many sites host images and scripts on external domains (e g , cdn provider net) if a whitelisted site appears "broken" (missing images or styles), check if you need to allow its cdn domains as well configuration & logic this page is used solely to link existing groups to the current policy to assign a group click the \<font color="#2563eb">`+ assign exception groups`\</font> button this will open a dedicated selection window to create/edit groups the actual lists of domains are managed in the global settings managing groups clicking the assign button opens a separate interface for selecting and managing your custom lists new exception docid\ xesj0rejztbh0d1gxrup7