Block Access to Specific Domain Names with a Block List
Configure a Domain Block List in a CloudConnexa Shield Policy to block specific domains beyond your content category settings — add domains manually or by .txt upload, search and download the list, and manage Block and Allow List precedence rules.
Overview
Configure a Domain Block List per Shield Policy to always block specific domains for users covered by that policy. The Domain Block List functions as a custom domain filtering category and is configured on the policy's Domain Block List tab.
You can enter domains directly or use a .txt file for batch upload. Each Domain Block List supports up to 150,000 characters.
The Domain Block List works only while Domain Filtering is on for the policy.
For more information about how filtering settings apply per policy, refer to About Shield Policies. To determine which User Groups receive the Block List settings, refer to Assign User Groups to a Shield Policy.
Before you begin
Ensure you have a Shield Policy to configure.
You can configure the Default Policy or a custom Shield Policy. To create a custom policy, refer to Create or Edit a Shield Policy.
Add domains to the Domain Block List
Add domains directly when you have a small number of entries to configure.
Navigate to Shield → Policies.
Select the Edit policy icon for an existing policy with Domain Filtering turned on.
Select Domain Block List.
Turn on Enable Block List.
Enter the domains you want to block, with one domain per line.
Review the list.
Select Save changes.
The Domain Block List applies to users covered by the Shield Policy.
Note
Changes may not apply immediately to domains that were previously visited because of local caching.
Upload a Domain Block List
Use Upload List to perform a batch upload of domains from a .txt file.
Open the Shield Policy and select the Domain Block List tab.
Turn on Enable block list, if it isn't already on.
Select Upload List.
Select the
.txtfile containing your Domain Block List.Important
Upload List replaces the current Domain Block List. It doesn't append the uploaded domains to the existing list.
Note
The list can contain up to 150,000 characters. Entries must use valid domain formats and ASCII characters.
Review the uploaded domains.
Save your changes.
Add a comment to the Domain Block List
Use # to add comments to the Domain Block List. Comments can help identify or organize groups of domains and aren't treated as domain entries.
Open the Shield Policy and select the Domain Block List tab.
Add
#at the beginning of the line (or useCTRL+on Windows or⌘+/on macOS), followed by your comment. For example:# Social media example.com example.org # Development services dev.example.net
Add or edit the domain entries as needed.
Save your changes.
Tip
You can include comments when you enter domains directly or in a
.txtfile used with Upload List.
Search the Domain Block List
Use search to find a domain or comment in the current Domain Block List.
Open the Shield Policy and select the Domain Block List tab.
Select anywhere inside the Blocked Domains field.
Press
Ctrl+Fon Windows or⌘+Fon macOS.Enter the domain or text you want to find.
Use the search bar arrows to move through matching entries.
Turn the Domain Block List on or off
Use Enable block list to control whether the policy uses its configured Domain Block List.
Open the Shield Policy and select the Domain Block List tab.
Turn Enable block list on or off.
Save your changes.
Turning off Enable block list retains the configured domains but stops the Block List from affecting Domain Filtering.
Important
The Domain Block List works only while Domain Filtering is on. If you turn off Domain Filtering for the Shield Policy, Enable block list turns off and is disabled.
How Domain Allow List and Block List entries match
The Domain Allow List and Domain Block List use domain name matching to determine whether an entry applies to a domain or its subdomains.
A domain entry applies to that domain and its subdomains. You can create an exception for a specific subdomain by adding it to the opposite list.
Domain name matching examples
Domain Allow List | Domain Block List | Result |
|---|---|---|
| — |
|
|
|
|
— |
|
|
|
|
|
CloudConnexa evaluates domain names from right to left, beginning with the top-level domain (TLD). A more specific subdomain entry on the opposite list overrides the broader parent-domain entry.
How the lists affect Domain Filtering
The Domain Allow List and Domain Block List also take precedence over the policy's content-category settings:
A domain on the Domain Allow List is always allowed, even if its content category is blocked.
A domain on the Domain Block List is always blocked.
Important
Don't add the same domain to both lists. CloudConnexa reports a conflict when an identical domain appears on both the Domain Allow List and Domain Block List. Remove the domain from one list before saving your changes.
Resolve Domain Block List validation errors
If CloudConnexa reports an error or warning, check the Domain Block List for:
Invalid domain formats.
Non-ASCII characters.
Duplicate domains.
Domains that are also on the Domain Allow List.
A list that exceeds the 150,000-character limit.
Correct the entries, then save your changes.
What happens next
Domains on the enabled Domain Block List are always blocked for users covered by the Shield Policy, regardless of their content category settings.
To make a specific domain accessible when its content category would otherwise be blocked, refer to Domain Allow List.
Tip
Changes may not apply immediately to previously visited domains because of local caching.