Cyber Shield Domain Filtering Category Groups and Categories
What is it?
Cyber Shield Domain Filtering Safe Browsing Mode is a preset that adds blocking of adult-related and alcohol/tobacco/drugs-related websites, along with malicious, aggressive, and hacking websites to Basic protection. Once Monitor mode is ON, and 1 or more Domain Filter categories are selected, domain name resolution requests are blocked from a pre-configured User, User Group, or Network to malicious domains.
Access the Cyber Shield page from the Administration portal and on the Domain Filtering pane turn Monitoring ON. This enables you to monitor domain traffic.
After monitoring is activated and if you want to block content categories, click on the edit (pencil) icon. The Domain Filtering window is displayed.
Click the Save button to save the changes and click X to exit.
Confirm that you are connected to the WPC using the same profile from the configured account.
Open a separate incognito browser tab and enter the OpenVPN test domain for the category you selected into the address bar. For example, to test Malware, enter
http://malware-test-domain.openvpn.com/and hit enter.Confirm from the Domain Filtering graph that the number of blocked domains has increased by 1.
Who should use this?
The Owner or Administrator will configure Domain Filtering to manage domain requests from a configured User, User group, or network to selected domain categories.
Why should I use this?
Managing requests from your network to selected domain categories improves your security posture and user productivity.
Show me how to configure it
Log in from your CloudConnexa Admin portal, or get a free 3 connection account.
Note
Domain Filtering is turned OFF by default. With Domain Filtering turned ON, you can choose whether you only monitor domain queries, or also block domain queries by category.
Expand the Shield menu in the Admin portal and select Overview.
Click the Domain Filtering drop-down menu and select Monitoring & Blocking.
Important
This enables the High Productivity Protection Level and will block all 43 Content Categories. To change the Protection Level, select Configuration from the left-nav menu. You may select a different Protection Level Preset Modes (Basic- Blocks Harmful Websites, Monitors all Content Categories, Safe Browsing- Adds blocking of Adult content, Monitors all Content Categories, or Custom-Select any Content Category, Monitors all Content Categories).
Test Domain Filtering
Select Configuration from the left-nav menu and choose the Custom Preset Mode.
For test purposes, select Malware from the list.
Click Update.
Confirm that you are connected to the WPC using the same profile from the configured account.
Open a separate incognito browser tab and navigate to the selected domain(s). For test purposes, navigate to:
http://malware-test-domain.openvpn.com/.Go back to the Top 10 Dashboardand select Blocked domains by Category. Check that the number of blocked domains has increased by 1.
Confirm that the dashboard displays the Malware Category circle.
Add additional Content Category filters as needed.
Category Group: Malicious
Selected Preset Mode | Basic | Safe Browsing | High Productivity |
|---|---|---|---|
Category Group Blocked | Yes | Yes | Yes |
Category: Adware
Websites that distribute Potentially Unwanted Programs (PUP) or Potentially Unwanted Applications (PUA) and ads via Pop-Ups. PUP and PUA are typically distributed within 3rd party bundled software packages when a user installs other desired software. PUP or PUA are not innately malicious, but can impact device performance, or pose a security risk by installing root certificates that can be exploited by malicious actors.
Caution
Does NOT include advertisement websites.
These websites may be accessed by links while visiting News/Media, or Social Networking websites. To ensure added blocking, enable those categories also.
Why Should I Choose this Category?
Avoid annoyance or distraction to your users
Increase user productivity
Protect user data
OpenVPN Test Domain
http://adware-test-domain.openvpn.com/
Category: Command and Control
Domains used for Command and Control of malware bots installed on user's computer. Also known as C2 or C&C – Command and Control establishes an unauthorized connection to a user’s computer.
This usually happens when a user opens a phishing email or other infected resource, allowing the malicious actor to commandeer the computer and execute their own code. The malicious actor may also have access to the user’s data.
These domains may be accessed by links while visiting News/Media websites, using Webmail, or Phishing attempts. To ensure added blocking, enable those categories also.
Some negative effects of Command and Control:
Compromised user and customer data
Why Should I Choose this Category?
Prevent unauthorized access to your device or network
Protect user or customer data
OpenVPN Test Domain
http://c2c-test-domain.openvpn.com/
Category: Cryptojacking
Websites used for Cryptojacking – unauthorized use of another user’s computer resources to mine cryptocurrencies. Cryptojacking is a class of malware that is distributed by phishing emails, adware, or infected websites.
Some negative effects of cryptojacking include:
Performance degradation
For Enterprise-level organizations, increased data costs
Why Should I Choose this Category?
Improve your security posture
Prevent unauthorized access to your device or network
Reduce potentially elevated data costs
OpenVPN Test Domain
http://cryptojacking-test-domain.openvpn.com/
Category: DGA
Random domains are generated using the DGA method to escape detection and establish coordinated attacks. DGA stands for Digital Generating Algorithm. This malware cyber attack method generates fictitious domains to establish communication with a Command and Control server to control the device. The fictitious command servers are decommissioned and re-generated at new IP addresses to continue coordinated attacks.
Why Should I Choose this Category?
Improve your security posture
Prevent unauthorized access to your device or network
Protect data
OpenVPN Test Domain
http://dga-test-domain.openvpn.com/
Category: Malware
Websites related to malware distribution and communication. Malware is software designed to gain unauthorized access to a user’s computer. Some websites contain forums discussing methods of distribution. Some websites are specifically created to deliver malware. Some malware distribution methods are:
Social Network spam – unsolicited messaging from social networks
To enable blocking of Social Networking, enable that category also
Drive by downloads from infected websites – unintentional downloads that install malware
To block potentially infected websites, enable the Web spam or scam category also
Exploit kits – A Remote Access Tool used to exploit a user’s computer
To block access to potentially dangerous sites, enable the Command and Control and Phishing categories also
Why Should I Choose this Category?
Improve your security posture
Prevent unauthorized access to your device or network
Protect data
OpenVPN Test Domain
http://malware-test-domain.openvpn.com/
Category: Phishing
Websites that spoof the original site or contain phishing links. Fictitious domains are used to fool users into clicking malicious links. These sites can be used to collect user data, or infect the user’s device.
Why Should I Choose this Category?
Improve your security posture
Protect data
OpenVPN Test Domain
http://phishing-test-domain.openvpn.com/
Category: Ransomware
Websites related to ransomware distribution and control. Ransomware is malicious software and techniques used to encrypt or otherwise make critical data and systems inaccessible. Users are manipulated to submit remittances to regain access to data. Ransomware can be distributed in the form of popups that require action from the user to avoid data loss, performance degradation, unauthorized distribution, or from email.
To ensure added protection against ransomware, you may need to enable the Webmail, File storage, Warez (includes torrents), Cryptocurrency and mining categories also.
Why Should I Choose this Category?
Improve your security posture
Protect data
Protect your company’s reputation and financial resources
OpenVPN Test Domain
http://ransomware-test-domain.openvpn.com/
Category: Web spam or scam
Websites that advertise fake services, products and other fraudulent schemes. These sites distribute unauthorized spam, or solicit fraudulent schemes. Web spam is evasive and is usually distributed from zombie computers that act as proxies to deliver unauthorized emails, tricking the users into clicking malicious links that may contain fake services, products, or fraudulent schemes. Less malicious spam can be a distraction for your users.
Why Should I Choose this Category?
Improve your security posture
Protect data
Increase user productivity
OpenVPN Test Domain
http://spam-test-domain.openvpn.com/
Adult Content
Adult
Selected Preset Mode Availability | Basic | Safe Browsing | High Productivity |
Category Blocked | NO | YES | YES |
Websites with adult content that do not fall into other specific adult content categories. (e.g. pregnancy, abortion, LGBT, or other 18+ topics). These websites may be accessed by links while visiting News/Media or Social Networking categories. To ensure added blocking, enable those categories also.
Why Should I Choose This Category?
Increase user productivity
CloudConnexa Test Domian
http://adult-test-domain.openvpn.com/
Category Group: Adult Content
Selected Preset Mode | Basic | Safe Browsing | High Productivity |
|---|---|---|---|
Category Group Blocked | Yes | Yes | Yes |
Bandwidth consuming
File storage
Selected Preset Mode Availability | Basic | Safe Browsing | High Productivity |
Category Blocked | NO | NO | YES |
Websites that allow users to host their files for internal use or public sharing. Unauthorized file storage tools that may compromise your company’s security.
Why Should I Choose this Category?
Prevent unauthorized access to your device or network
Increase user productivity
CloudConnexa Test Domain
http://file-storage-test-domain.openvpn.com/
Streaming Movies & Video
Websites that host streaming audio and video, and offer movies/series for download or online streaming. You may also need to enable the Warez (includes torrents), Music categories also.
Why Should I Choose this Category?
Increase user productivity
CloudConnexa Test Domain
http://dating-test-domain.openvpn.com/
Hate
Websites promoting intolerance based on gender, age, race, nationality, religion, sexual orientation, or other group identities. Websites with content or references promoting violence, or any form of discrimination based on a person's identity.
These websites may be accessed by links while visiting News/Media, or Social Networking websites. To ensure added blocking, enable those categories also.
Why Should I Choose this Category?
Increase user productivity
CloudConnexa Test Domain
http://hate-test-domain.openvpn.com/
Nudity
Websites, including Celebrity gossip websites, with a high percentage of nudity, swimwear, underwear, and intimate fashion apparel. May include websites with Celebrities advertising swimwear, underwear or intimate fashion apparel.
Why Should I Choose this Category?
Increase user productivity
CloudConnexa Test Domain
http://nudity-test-domain.openvpn.com/
Pornography
Websites related to pornography or sexually explicit content (18+). These websites may be accessed by links while visiting News/Media, or Social Networking websites. To ensure added blocking, enable those categories also.
Why Should I Choose this Category?
Increase user productivity
CloudConnexa Test Domain
http://pornography-test-domain.openvpn.com/
Sexuality
Websites related to sexuality and sex education. May include websites that redirect to websites related to sexuality and sex education. These websites may be accessed by links while visiting News/Media, or Social Networking websites. To ensure added blocking, enable those categories also.
Why Should I Choose this Category?
Increase user productivity
CloudConnexa Test Domain
http://sexuality-test-domain.openvpn.com/
Swimsuits and underwear
Websites related to swimsuits and underwear. May contain partial nudity. These websites may be accessed by links while visiting News/Media, or Social Networking websites. To ensure added blocking, enable those categories also.
Why Should I Choose this Category?
Increase user productivity
CloudConnexa Test Domain
http://swimsuits-test-domain.openvpn.com/
Category Group: Aggressive Content
Selected Preset Modes | Basic | Safe Browsing | High Productivity |
|---|---|---|---|
Category Group Blocked | No | Yes | Yes |
Aggressive Content
Contact sport
Websites related to contact sports (e.g., martial arts, WWE, and UFC). These websites may be accessed by links while visiting News/Media, or Social Networking websites. To ensure added blocking, enable those categories also.
Why Should I Choose this Category?
Increase user productivity
CloudConnexa Test Domain
http://contact-sport-test-domain.openvpn.com/
Hunting and fishing
Websites related to hunting and fishing. These websites may be accessed by links while visiting News/Media, or Social Networking websites. To ensure added blocking, enable those categories also.
Why Should I Choose this Category?
Increase user productivity
CloudConnexa Test Domain
http://hunting-test-domain.openvpn.com/
Inappropriate
Websites related to crime, anorexia, suicide, profanity, or violence. These websites may be accessed by links while visiting News/Media, or Social Networking websites. To ensure added blocking, enable those categories also.
Why Should I Choose this Category?
Increase user productivity
CloudConnexa Test Domain
http://tasteless-test-domain.openvpn.com/
Military
Websites related to the military. These websites may be accessed by links while visiting News/Media, or Social Networking websites. To ensure added blocking, enable those categories also.
Why Should I Choose this Category?
Increase user productivity
CloudConnexa Test Domain
http://military-test-domain.openvpn.com/
Weapons
Websites related to weapons (e.g. guns, knives, and Army memorabilia). These websites may be accessed by links while visiting News/Media, or Social Networking websites. To ensure added blocking, enable those categories also.
Why Should I Choose this Category?
Increase user productivity
CloudConnexa Test Domain
http://weapons-test-domain.openvpn.com/
Category Group: Alcohol / Tobacco / Illegal Drugs
Selected Preset Mode | Basic | Safe Browsing | High Productivity |
|---|---|---|---|
Category Group Blocked | No | Yes | Yes |
Alcohol / Tobacco / Illegal Drugs
Alcohol
Websites related to alcohol. These websites may be accessed by links while visiting News/Media, or Social Networking websites. To ensure added blocking, enable those categories also.
Why Should I Choose this Category?
Increase user productivity
CloudConnexa Test Domain
http://alcohol-test-domain.openvpn.com/
Illegal Drugs
Websites related to illegal drugs, selling illegal drugs, narcotics, or steroids. These websites may be accessed by links while visiting News/Media, or Social Networking websites. To ensure added blocking, enable those categories also.
Why Should I Choose this Category?
Increase user productivity
CloudConnexa Test Domain
http://drugs-test-domain.openvpn.com/
Tobacco
Websites related to tobacco, smoking, or cigarettes.
Why Should I Choose this Category?
Increase user productivity
CloudConnexa Test Domain
http://tobacco-test-domain.openvpn.com/
Category Group: Hacking and cracking
Selected Preset Mode | Basic | Safe Browsing | High Productivity |
|---|---|---|---|
Category Group Blocked | No | Yes | Yes |
Hacking and cracking
Websites related to hacking (e.g. cracking, stolen data, jailbreaking, etc). Websites related to hacking — unauthorized use of a user’s device or network.
Websites related to cracking-- the act of obtaining unauthorized access to a user’s device or network.
Websites containing or forums discussing stolen data.
Websites discussing jailbreaking-- the act of exploiting a system’s vulnerabilities for the purpose of modifying its functionality or sites discussing those techniques.
Why Should I Choose this Category?
Improve your security posture
Increase user productivity
CloudConnexa Test Domain
http://proxy-test-domain.openvpn.com/
Proxy/Anonymizers
Websites related to web proxy bypass and other web browsing restrictions.
Why Should I Choose this Category?
Improve your security postureImprove your security posture
Protect data
CloudConnexa Test Domain
http://proxy-test-domain.openvpn.com/
Warez (includes torrents)
Websites related to torrents, warez, software cracks, and other BNher pirated content. May contain adult content for download. You may also need to enable the Music, Streaming Movies & Video categories also.
Why Should I Choose this Category?
Reduce legal liability
Prevent unauthorized access to your device or network
Increase user productivity
CloudConnexa Test Domain
http://file-storage-test-domain.openvpn.com/
Category Group: Bandwidth consuming
Selected Preset Mode Availability | Basic | Safe Browsing | High Productivity |
|---|---|---|---|
Category Blocked | No | No | Yes |
Category: File storage
Websites that allow users to host their files for internal use or public sharing. Unauthorized file storage tools may compromise your company’s security.
Why Should I Choose this Category?
Prevent unauthorized access to your device or network
Increase user productivity
OpenVPN Test Domain
http://file-storage-test-domain.openvpn.com/
Category: Streaming Movies & Video
Websites that host streaming audio and video, and offer movies/series for download or online streaming. You may also need to enable the Warez (includes torrents), Music categories also.
Why Should I Choose this Category?
Prevent unauthorized access to your device or network
Increase user productivity
OpenVPN Test Domain
http://movies-test-domain.openvpn.com/
Category: Music
Websites related to streaming music, music magazines, lyrics, bands, musical instruments , and music downloads. You may also need to enable the Warez (includes torrents), Streaming Movies & Video categories also.
Why Should I Choose this Category?
Prevent unauthorized access to your device or network
Increase user productivity
OpenVPN Test Domain
http://music-test-domain.openvpn.com/
Category Group: Gambling and Games
Selected Preset Mode | Basic | Safe Browsing | High Productivity |
|---|---|---|---|
Category Group Blocked | No | Yes | Yes |
Category: Gambling
Websites related to gambling and betting. These websites may be accessed by links while visiting News/Media, or Social Networking websites. To ensure added blocking, enable those categories also.
Why Should I Choose this Category?
Increase user productivity
OpenVPN Test Domain
http://gambling-test-domain.openvpn.com/
Category: Games
Websites related to and providing computer or online games and information about them. These websites may be accessed by links while visiting News/Media, or Social Networking websites. To ensure added blocking, enable those categories also.
Why Should I Choose this Category?
Increase user productivity
OpenVPN Test Domain
http://games-test-domain.openvpn.com/
Category Group: Time stealer
Selected Preset Mode | Basic | Safe Browsing | High Productivity |
|---|---|---|---|
Category Group Blocked | No | No | Yes |
Category: Chat and Messengers
Websites that host chat applications and provide online communications capabilities. These websites may be accessed by links while visiting Social Networking websites. To ensure added blocking, enable that categories also.
Why Should I Choose this Category?
Increase user productivity
OpenVPN Test Domain
http://chat-test-domain.openvpn.com/
Category: Classifieds/Auctions/Shopping
Websites related to second-hand sales, shopping, and online auctions. These websites may be accessed by links while visiting News/Media, or Social Networking websites. To ensure added blocking, enable those categories also.
Why Should I Choose this Category?
Increase user productivity
OpenVPN Test Domain
http://classifieds-test-domain.openvpn.com/
Category: Cryptocurrency and mining
Websites related to cryptocurrency and crypto mining.
Why Should I Choose this Category?
Protect compute resources
OpenVPN Test Domain
http://cryptocurrency-test-domain.openvpn.com/
Category: Entertainment and Arts
Websites related to gossip, celebrity, humor, viral jokes, art, entertainment, and other time stealers. These websites may be accessed by links while visiting News/Media, or Social Networking websites. To ensure added blocking, enable those categories also.
Why Should I Choose this Category?
Increase user productivity
OpenVPN Test Domain
http://entertainment-test-domain.openvpn.com/
Category: Forums
Discussion and forum websites. These websites may be accessed by links while visiting News/Media, or Social Networking websites. To ensure added blocking, enable those categories also.
Why Should I Choose this Category?
Increase user productivity
OpenVPN Test Domain
http://forums-test-domain.openvpn.com/
Category: Job search
Websites related to job offers, job search, HR software, job/resume tips , and freelancing job sites.
Why Should I Choose this Category?
Increase user productivity
Workforce retention
OpenVPN Test Domain
https://job-search-test-domain.openvpn.com/
Category: News/Media
Websites related to news, and newspapers. Websites with news media content.
Why Should I Choose this Category?
Increase user productivity
OpenVPN Test Domain
http://news-test-domain.openvpn.com/
Category: Nonsense and time waste
Websites that host directories to viral jokes, humor, memes, movies, and other time-stealers. Unproductive websites that contain humorous or video content not related to your company’s business goals.
Why Should I Choose this Category?
Increase user productivity
OpenVPN Test Domain
http://nonsense-test-domain.openvpn.com/
Category: Real estate
Websites related to real estate or house rentals. These websites contain content about real estate availability, purchases, sales, or rentals.
Why Should I Choose this Category?
Increase user productivity
OpenVPN Test Domain
http://real-estate-test-domain.openvpn.com/
Category: Social Networks
Websites related to networking between people. Social Networking sites that do not fall into the job search category.
Why Should I Choose this Category?
Improve your security posture
Increase user productivity
Protect users from Social Network spam
OpenVPN Test Domain
http://social-networks-test-domain.openvpn.com/
Category: Webmail
Websites that offer to send and receive emails. Browser-based email systems that may or may not be protected by your network’s WPC.
Why Should I Choose this Category?
Protect users' data from potentially vulnerable web-based email domains
OpenVPN Test Domain
http://webmail-test-domain.openvpn.com/