As a Securd administrator, you can block and allow host names and domains so that users can only visit certain websites. Restricting users’ access on the Internet increases productivity and protects your organization from viruses and malware.
When to Allow or Block Sites
Use the block list and allow list functionality to make granular block and allow settings in a Securd security policy.
Block and Allow Options
- Block site at the hostname or domain level – Blocked hosts or domains will be immediately blocked with no additional processing.
- Block site at the network level – Records resolving to a network will be immediately blocked no additional processing.
- Allow site at the hostname or domain level – Allow hosts or domains to never be blocked and override all security policy settings.
- Allow site at the network level – Allow hosts or domains resolving to a network to never be blocked and override all security policy settings.
How to Configure Allow or Block for a domain or network
Step 1: Review your security policy
In the Securd policy editor, administrators need to be familiar with the active allow/block policies lists that are mapped to a security policy. Modifying the policy lists will be immediately applied to policy that is mapped to your sites, agents and browser deployment.
Step 2: Choose a block or allow list to modify
Chose a domain list or a network list that you want to edit. Allow lists are highlighted in green. Block lists are highlighted in red. You can also create a new list if you chose. Make sure the new list is mapped to a policy as in Step 1.
Step 3: Add domains or networks to your block or allow list
In the policy list editor, add a host name or domain that you wish to block or allow. In this example, we will block access to xyz.com. Since the policy is mapped to your default security policy (as displayed in Step 1), when you hit “Save” the domain will be immediately start to be blocked.
Step 4: Verify block or allow by visiting a listed domain or network
To verify your policy list change, browse to the example xyz.com domain. Instead of being able to access the domain, you will be presented a Securd block page. The block page will also have a reason displayed why the page was blocked.
Warning: Blocking a network without the proper research can result in blocking innocent domains and disrupting access to trustworthy websites. When you choose to block an IP address or CIDR block, you should be aware if that network or IP space performs shared hosting. All the domains on that resolve to the block listed IP or network will be blocked!