Policies

What gets blocked, and for whom.

Standard protection

Malware, phishing, C2 and cryptomining blocked. Ads and tracking left alone.

default2 networks assigned

Blocked categories

MalwareDomains distributing malicious payloads or hosting exploit kits.PhishingCredential harvesting and brand-impersonation domains.C2 / BotnetCommand-and-control infrastructure that compromised devices call home to.CryptominingMining pools and in-browser cryptojacking scripts.Newly registeredDomains registered in the last 30 days, heavily over-represented in attacks.Ads & trackingAdvertising and telemetry endpoints.Adult contentDomains serving adult material.GamblingBetting and casino domains.

When blocking, answer withLog individual queries

Always allow (one domain per line)Always block (one domain per line)

Assigned to: Office, Roaming laptops

Strict

Threats plus newly registered domains, advertising, tracking and adult content.

1 network assigned

Blocked categories

When blocking, answer withLog individual queries

Always allow (one domain per line)Always block (one domain per line)

Assigned to: Guest Wi-Fi

Monitoring only

Blocking off, logging on — samples still resolve so behaviour can be observed.

1 network assigned

Blocked categories

When blocking, answer withLog individual queries

Always allow (one domain per line)Always block (one domain per line)

Assigned to: Lab

Add a policy

Starts from the default threat categories.