Policy Best Practice: Overlapping domains in Global Policies

It is important to recognize that using the Global Allow or Block list in Securly may not be the ideal choice when Allowing or Blocking websites. This KB covers some best practice around how to allow and block URLs within Securly Filter.

1. Overlapping domains in Global Policies

   • The Global Allow/Block list settings can lead to unpredictable outcomes, particularly when trying to block a domain like sites.google.com while allowing access to sites.google.com/mysite.
   •  
   • This can create confusion among users and administrators alike as it may inadvertently block necessary access websites or allow prohibited sites which should be blocked.
   •  

2. Alternative Method:

   • To effectively manage access, especially in situations like the example given, utilize the Policy Allow/Block list:
   •  
     • Steps to Configure:

1. Log into Securly Filter > Navigate to Policy Editor.
2. Create or select the appropriate policy that needs adjusting.
3. Utilize the Allow/Block list feature within that policy to effectively manage your settings on a more granular level, ensuring full URL support.
   1. E.g. Allow sites.google.com/mathslesson
   2. e.g. Block sites.google.com/unblockedgames

1. Benefits of Policy Allow/Block Lists:

   • This method provides a precise way to control access—where blocks can be prioritized or overridden by allows, eliminating the confusion caused by broad settings in the Global list.

By following the aforementioned steps and considerations, users can achieve more reliable and expected outcomes while managing website access.