Configure Domain Filtering for a Shield Policy
You can configure the content categories to block using preset Protection Levels or by choosing the Custom Protection Level and selecting individual content categories to block.
You can configure the content categories to block using preset protection levels or by choosing the Custom Protection Level and selecting individual content categories to block. To learn more about the content categories, content category groups, and protection levels, refer to Domain Filtering
To choose the content categories to block, follow the steps below:
Navigate to Shield > Configuration.
Click Categories in the section navigation that appears to the right under Domain Filtering.
Select one of the four Protection Levels that block content categories: Basic Protection, Safe Browsing, High Productivity, or Custom.
The resulting content categories that will be blocked appear in the Selected Categories section.
When the Custom Protection Level is selected, you can search for and select specific content categories to block from the list in the Selected Categories section.
Click Update.
Overview
Configure Domain Filtering per Shield Policy to monitor or block domains based on content category. On the policy's Domain Filtering tab, turn on Domain Filtering and select a protection level that determines which content categories CloudConnexa monitors or blocks.
Choose from five protection levels using the horizontal selector: Monitor Only, Basic Protection, Safe Browsing, High Productivity, or Custom. The preset protection levels provide predefined category settings, while Custom lets you configure individual categories.
For more information about how Shield Policies apply filtering settings, refer to About Shield Policies.
For details about the available protection levels and content categories, refer to Domain Filtering.
Before you begin
Ensure you have a Shield Policy to configure.
You can configure the Default Policy or a custom Shield Policy. To create a custom policy, refer to Create or Edit a Shield Policy.
Configure Domain Filtering
Navigate to Shield → Policies.
Select the Edit policy icon for the Shield Policy you want to configure or select New Policy.
Select Domain Filtering.
Turn on Domain Filtering.
Use the horizontal selector to select one of the five protection levels:
Protection Level
Behavior
Monitor Only
Monitors DNS queries without blocking any content categories.
Basic Protection
Monitors DNS queries and blocks the Malicious category group.
Safe Browsing
Monitors DNS queries and blocks the Malicious, Adult Content, Aggressive Content, Alcohol, Tobacco, Illegal Drugs, and Hacking and Cracking category groups.
High Productivity
Monitors DNS queries and blocks all eight category groups.
Custom
Lets you choose whether to monitor or block each of the 43 content categories.
If you select Custom, configure the content categories you want to monitor or block:
Browse the content category groups or search by name to find a specific category.
Set individual categories to Monitored or Blocked.
Use Monitor All or Block All to change all categories within a content category group.
Review Selected Categories to verify your selections.
Note
If no content categories are blocked, the protection level falls back to Monitor Only.
Save your changes.
The selected Domain Filtering settings apply to users and resources protected by that Shield Policy.
Change between Custom and preset protection levels
Change the protection level when you want to use different Domain Filtering settings for the Shield Policy.
Open the Shield Policy and select the Domain Filtering tab.
Select a different protection level from the horizontal selector:
To customize a preset, change from Basic Protection, Safe Browsing, or High Productivity to Custom.
CloudConnexa keeps the current category selections so you can modify individual content categories.
To replace a Custom configuration with a preset, select Basic Protection, Safe Browsing, or High Productivity.
CloudConnexa resets your custom category selections and applies the categories defined by the selected preset.
To monitor categories without blocking them, set all content categories to Monitored.
If no content categories are blocked, CloudConnexa automatically changes the protection level from Custom to Monitor Only.
Review the monitored and blocked category counts to verify the new configuration.
Save your changes.
Important
Changing from Custom to Basic Protection, Safe Browsing, or High Productivity replaces your custom category selections with the selected preset.
What happens next
CloudConnexa applies the selected Domain Filtering protection level to DNS activity covered by the Shield Policy.
You can further customize Domain Filtering for the policy by:
Adding domains to the Domain Allow List to keep specific domains reachable even when their content category is blocked.
Adding domains to the Domain Block List to always block specific domains.
Refer to Domain Allow List and Domain Block List.
Tip
Changes may not apply immediately to domains that were previously visited because of local caching.