Saucepan

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== Threat Defense URL Filtering ======

When Infoblox filters a DNS name, it returns one of the following IP addresses
<code>52.4.105.248</code>
<code>3.215.231.251</code>
<code>35.168.95.233</code>
When you go to this IP, you will see the Infoblox block page.


ByPasscodes will redirect users to <code>https://smartproxy.b1tdc.infoblox.com</code>


If you access this page over HTTPS, the page will be signed by the Infoblox BloxOne Root CA.

You must install this certificate as a trusted Root CA to avoid browser errors.


===== Filtering Example =====
You cannot have more than 5 expressions


<code>(category="Browser Exploits") OR (category="Malicious Downloads") OR (category="Malicious Sites") OR (category="Phishing") OR (category="Spyware/Adware/Keyloggers")</code>

<code>(category="Pornography") OR (category="Gambling")</code>


<code>(category!=Uncategorized) AND (category!="Parked Domain") AND (category!="Shareware/Freeware")</code>

  * (action=Redirect)
  * (action=Log)

  * (category!="Anonymizing Utilities")
  * (category!="Shareware/Freeware")
  * (category!=Uncategorized)

  * (device_ip=10.10.54.103)
  * (device_name=laptopname.example.com.)

  * (query=api.bazaarvoice.com)
  * (query=bazaarvoice.com) - This will also match api.bazaarvoice.com

  * (user=unknown)
===== Unknown Category =====
Exempt from Category Checking (thus "unknown")
  * ntp.org
  * infoblox.com
  * login.okta.com
  * cdnjs.cloudflare.com
===== Categories =====
List of web categories documented [[https://docs.infoblox.com/space/BloxOneThreatDefense/87100038/Mapping+for+Domain+Categories|here]].