Skip to main content

Check out Interactive Visual Stories to gain hands-on experience with the SSE product features. Click here

Skyhigh Security

Fine-tune URL Blocking

Configure the cloud and Skyhigh Security GTI settings used by the web filtering feature.

  1. From the Skyhigh CASB navigation bar, select Policy > Web Policy > Feature Configuration.
  2. From the Feature Config list, select Web Filtering > Default GTI Setting.
  3. From the Actions drop-down list, select Clone and Edit.
  4. Provide a name for the feature configuration and an optional comment.
  5. When these Cloud Settings are selected, the feature:
    • Treat problems with connections to the cloud as errors — Logs problems connecting to the Skyhigh Security GTI server as errors.
    • Treat invalid URLs as errors — Logs invalid URLs as errors.
    • Do a backward DNS lookup also for private addresses — Uses the DNS lookup tool to find the domain names corresponding to private IP addresses and uses the domain names for the filtering process.
      NOTE: Selecting this option can lower performance.
  6. When these GTI Settings are selected, the feature:
    • Search URL path for embedded URLs and categorize them — Searches the URL for embedded URLs and rates the embedded URLs. These ratings affect the rating of the URL overall.
      NOTE: Selecting this option can lower performance.
    • Parse web page content for URLs and block them — Blocks webpages containing URLs.
    • Do a forward DNS lookup to categorize URLs — Uses the DNS lookup tool to find the IP addresses corresponding to unrated URLs and uses the IP addresses in the filtering process.
    • Do a backward DNS lookup for unrated IP-based URLs — Uses the DNS lookup tool to find the domain names corresponding to unrated IP address-based URLs and uses the domain names in the filtering process.
    • Detect URLs based on built-in keywords — Includes built-in keywords in the search for URLs.
    • Enable the Dynamic Content Classifier if GTI web categorization yields no result — Uses the Dynamic Content Classifier categories for URLs that Skyhigh Security GTI is unable to rate.
  7. (Dynamic Content Classification) Click Add Category to add categories to the DCC process, then select an option:
    • Select Supported Categories to select all categories, then click Done.
    • Expand Supported Categories to select categories individually, then click Done when finished.
  8. Click Save.

    The named Web Filtering configuration is saved.

You can publish saved changes to the cloud now or keep working and publish later.

  • Was this article helpful?