Select Malicious Traffic To Block Based On Threat Categories
Configure Traffic Filtering in a CloudConnexa Shield Policy to block malicious traffic by threat category — select individual threat categories using Per Category mode on the policy's Traffic Filtering tab. Selecting a category includes all of its threat priorities.
Overview
Configure Traffic Filtering per Shield Policy to block malicious traffic based on threat category. On the policy's Traffic Filtering tab, select Per Category to select which types of traffic the Intrusion Prevention System (IPS) blocks when traffic matches applicable threat signatures.
CloudConnexa provides nine Traffic Filtering categories. Selecting a category includes all of its priorities, so traffic matching that category can be blocked regardless of whether the associated threat priority is Critical, High, or Medium.
For more information about how Shield Policies apply filtering settings, refer to About Shield Policies.
For details about Traffic Filtering priorities and protection levels, refer to Traffic Filtering.
Before you begin
Ensure you have a Shield Policy to configure.
You can configure the Default Policy or a custom Shield Policy. To create a custom policy, refer to Create or Edit a Shield Policy.
Block malicious traffic by threat category
Navigate to Shield → Policies.
Select the Edit policy icon for the Shield Policy you want to configure or select New Policy.
Select Traffic Filtering.
Turn on Traffic Filtering.
Select Per Category.
Select the threat categories you want to block:
Threat category
Threat priorities
Adware
Medium
Cryptojacking
Medium
Denial of Service
High
Intrusion Activity
Critical, High, Medium
Known Threats
High, Medium
Malware and Ransomware
Critical
Phishing
High
Tor
Medium
Vulnerabilities/Exploits
High, Medium
Note
Selecting a category includes all of its priorities. For example, if a category contains Critical, High, and Medium threat signatures, selecting that category includes all three priorities.
Save your changes.
The selected Traffic Filtering settings apply to traffic protected by that Shield Policy.
What happens next
CloudConnexa monitors tunneled traffic for matching threat signatures. When traffic matches a signature in one of your selected categories, the IPS blocks the matching traffic.
To block traffic based on specific threat types rather than threat severity, refer to Block Threat Categories.