Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • Category Filter: Select this rule to add a category filter to the policy. Category filters are content categorization rules that allow you to detect and filter internet content and traffic that you want to allow or block. +:
    • OBJECT: From the OBJECT menu, select a category filter from among the available  options.  Click Select to add the category filter to the policy. 
    • ACTION: From the ACTION menu, select an action type for the category filter to be added to your security policy. Action types include the following:   

      • Allow - No Log: Allows filtering of categories without logging of responses. Events will not be displayed in Security Activity reports.

      • Allow - With Log: Allows filtering of categories with logging of responses.

      • Block - No Redirect: Blocks filtering of categories when no redirection is used.

      • Block - Default Redirect: Blocks filtering of categories when the default redirect is used.

      • Block - Redirect: Blocks filtering of categories when a custom redirect is used.

      • Block (No Log) - No Redirect: Blocks filtering of categories when no redirect is used. Events will not be displayed in Security Activity reports.

      • Block (No Log) - Default Redirect: Blocks filtering of categories when using the default redirect. Events will not be displayed in Security Activity reports.

      • Block (No Log) - Redirect: Blocks filtering of categories when using a redirect. Events will not be displayed in Security Activity reports.

...

Precedence order considerations when defining a policy-based on tags: If the Default Global Policy has higher precedence than a custom policy having network scopes defined based on tags, then the Default Global Policy will continue to work because its precedence is higher than the custom policy. For a custom policy having network scope defined based on tags to work, it should have higher precedence than the Default Global Policy.
For information on applying tags to BloxOne Infoblox Threat Defense objects, see Applying Tags.

...

4. Click Next in the wizard to add bypass codes. For more information, see Adding Bypass Codes to a Security Policy.

Precedence Order

Warning
titleWarning

Application filtering: When Local On-prem Resolution is enabled, application filters take priority when executing rules governing precedence order. 

The recommended precedence order for executing rules in a security policy , from highest to lowest order of precedence, is as follows:  

1. Custom Lists
2. Feeds
3. Threat intelligenceInsight
4. Category Filters
5. Default

Warning
titleWarning

When Local On-prem Resolution is enabled, application filters take priority when executing rules governing precedence order. 

While the above precedence order is recommended, the decision of precedence order is determined by the organization. When creating rules for a security policy, do keep precedence order in mind. 

...