Protection Overview
Overview
The Protection section is the central command center for your network security. Here, you define the logic that determines which websites are accessible, which threats are blocked, and how the system handles specific exceptions and user block screens.
Navigate to Protection in the main sidebar to access the three key modules: Policies, Exceptions, and Block Page.
Policies
Policies are the core of your filtering system. A Policy is a container that bundles all your specific filtering rules (Malware, Content, GeoBlocking, etc.) into a single, assignable object. Instead of configuring every network individually, you create a Policy (e.g., "Guest Wi-Fi" or "Office Staff") and assign it to as many networks as needed.
- Standard Policies: Fully customizable profiles where you control every security layer.
- Restricted Policies: Locked-down profiles with pre-set security rules, ideal for strict compliance.
For detailed instructions on creating and assigning security profiles, refer to the Policies Guide.
Exceptions
While Policies handle broad web categories (like "Block Social Media" or "Block Malware"), Exceptions handle specific domain names. Use this module to create granular overrides that supersede your overarching Policy rules:
- Allow List (Whitelist): Ensure a specific domain (e.g., partner-company.com) is always accessible, even if its broader category is blocked.
- Block List (Blacklist): Forcefully block a specific domain (e.g., distracting-game.com) even if its general category is allowed.
For instructions on managing global and policy-specific lists, see the Exceptions Guide.
Block Page
The Block Page module allows you to centralize and manage the courtesy screens displayed to users when they attempt to access restricted domains.
- Customization: Design fully personalized block screens hosted directly on the platform to match your organization's branding.
- External Redirects: Automatically forward blocked traffic to an external URL, such as a corporate intranet or an internal IT support desk.
For a complete walkthrough on designing layouts and redirect rules, refer to the Block Page Configuration Guide.
How the Protection Flow Works
To secure a network effectively, follow this logical workflow:
- Create a Policy: Define your categorical rules for Malware, Content, and Applications.
- Configure the Block Page: Set up the courtesy screen or redirect that users will see if they hit a blocked domain, and link it to your policy.
- Assign the Policy: Apply this completed security profile to your desired Networks, Endpoints, or Groups.
- Manage Exceptions: If a legitimate site is blocked (or an unwanted site gets through), add it to the Exceptions list to fine-tune the filter without altering your broader categorical rules.