Use the Cyber Shield Overview
The Cyber Shield Overview shows the Default Policy's filtering status, User Group coverage across custom and default policies, and an activity chart of monitored and blocked events — filtered by period, filtering type, and event type, with drill-down by time period.
Overview
The Cyber Shield Overview gives you a central view of your Domain Filtering and Traffic Filtering configuration and activity.
From the Overview, you can:
Check the filtering levels configured in your Default Policy.
See how many threat categories are monitored and blocked.
Review which User Groups use the Default Policy or a custom Shield Policy.
Change the Default Policy or create custom policies for User Groups.
View filtering activity for different periods.
Switch between Domain and Traffic Filtering events.
View monitored or blocked events.
Drill down into activity for a specific period.
If Cyber Shield hasn't been configured yet, an onboarding modal directs you to configure the Default Policy.
View your Default Policy settings
The Default Policy card shows the Cyber Shield filtering configuration that applies when a User Group doesn't have a custom Shield Policy assigned.
The card has separate rows for Domain Filtering and Traffic Filtering. Each row provides:
The active filtering level, shown as a pill with the preset name or Off.
A coverage bar that visually represents the categories covered by the filtering configuration.
The number of monitored and blocked categories, shown as N monitored · N blocked categories.
To change the Domain Filtering or Traffic Filtering configuration, select Edit Default Policy.
For more information about how Cyber Shield policies work, refer to About Shield Policies.
For details about the policy used when no custom policy is assigned, refer to About the Default Policy.
View policy coverage for User Groups
The User Groups Coverage card shows how Shield Policies are assigned across your User Groups. The card changes depending on hether the Default Policy is configured and whether custom policies exist.
When the Default Policy isn't configured
If all filtering options in the Defaul Policy are set to Off, the card shows: 0 of N — on custom.
Select Configure Default Policy to configure Domain Filtering, Traffic Filtering, or both for the Default Policy.
For more information, refer to About the Default Policy.
When all User Groups use the Default Policy
After at least one filtering option is configured in the Default Policy, and no custom policies have been created, the card shows: All N user gorups share one policy
It also explains the benefit of creating custom Shield Policies for different User Groups.
Select Create Your First Policy to configure a custom policy and assign it to User Groups.
For detailed instructions, refer to Create or Edit a Shield Policy.
When User Groups use custom policies
After one or more User Groups use custom Shield Policies, the card displays a gauge showing: X of N — On custom.
The legend identifies how many User Groups are:
N on default
N on custom
Select View All Policies to review and manage your Shield Policies.
For more information, refer to Browse and Manage Shield Policies.
Tip
If your default policy has domain and traffic filtering off, the card displays N on unprotected.
Explore Cyber Shield activity
Use the controls and activity chart on the Overview to change the data displayed and investigate Cyber Shield activity.
The Period, Filtering Type, and Events selections apply to the entire Overview.
Control or interaction | What it does |
|---|---|
Period | Select the time range for the Overview data: This Hour, Last 24 Hours, Last 7 Days, or Last 30 Days. Longer ranges are available depending on your plan. The exact date and time range displays beneath the Period dropdown. |
Filtering Type | Switch between Domain and Traffic filtering data. The selection applies to the entire Overview. |
Events | Switch between Monitored and Blocked events. The selection applies to the entire Overview. |
Activity chart | View filtering activity for the selected period, filtering type, and event type. The chart title identifies the selected mode and source, such as Monitored Domain Events. |
Select a bar in the activity chart | Drill down into that period to view its activity in greater detail. Use the revert action to return to the previous period view. |
Refresh | Retrieve the latest Cyber Shield activity. The last-updated value shows when the data was most recently refreshed and displays the time in your local time. |
Configure Cyber Shield for the first time
If Cyber Shield isn't configured, an onboarding modal displays over the Overview. Use the modal to configure the Default Policy.
If you previously configured Cyber Shield before Shield Policies were introduced, refer to Migrate Existing Cyber Shield Settings to Shield Policies for information about how your existing configuration maps to the new policy model.