Document toolboxDocument toolbox

Filters

Owned by Gary Leicht
Last updated: Sept 06, 2024
2 min read

Infoblox Threat Defense provides security filtering options that enable the creation of rules to limit user and application access to specific types of Internet content. Administrators can establish category filters which govern access based on the type of content, and application filters which control access based on the application type. Depending on the established configuration, Infoblox Threat Defense will execute designated actions such as Allow or Block on content that matches the defined rules. However, under certain circumstances, the filter may not block all components of a given application or webpage. This is because many applications use "shared" components that cannot be blocked without possibly affecting other applications.

Category filters are content categorization rules that Infoblox Threat Defense uses to detect and filter specific internet content, such as gambling related sites or certain lifestyle information.

Application filters are rules that Infoblox Threat Defense uses to allow or deny specific applications, such as email, video conferencing, and others. The Application Classification Service (ACS) provides accessibility to applications based on their category or subcategory. Using application filters, you can set security policies based on whether you want to allow an application to access the Internet at all times, or if you want the application to use local resolution when used with Universal DDI appliances. 

For information on using application filters with local on-prem resolution, see local on-prem resolution.   

On the Filters tab (Configure > Policies > Security), you can view the following details for the respective category and application filters:

  • NAME: The name of the category or application filter.
  • DESCRIPTION: The description of the category or application filter.
  • CATEGORIES/APPLICATIONS: The number of category items possessed by the category or application filter. 
  • POLICIES: The security policies that apply to the category filter or application filter.
  • TYPE: The type of filter. Filters are of two types: Category filters and Application filters. A type of filter is selected when the filter is configured.  

You can also perform the following in this tab:

  • Click the expandable menu icon to select the columns you want to display or use the arrow keys to reorder the columns.

  • Clickthe expandable menu icon > Edit to modify category or application filter information. You can also select the respective category or application filter and click the Edit button to perform edits on an already existing filter.

  • Clickthe expandable menu icon> Remove to delete a category or application filter. You can also select the respective category or application filter and click the Remove button to remove the respective filter..

  • Select a category or application filter to view additional details in the right panel. You can collapse the right panel by clicking the information icon. 

  • Enter the value that you want to search in the Search text box. The Infoblox Portal displays the list of records that match the keyword in the text box.

For information on configuring category filters and application filters, see the following: