You can block application categories or specific apps by configuring application settings in your policies. For a full list of application categories, see Understanding Application Categories.
Note: Some apps require you to enable the intelligent proxy with SSL decryption in your policy. If your policy does not use SSL decryption, you are prompted to enable it if you try to select apps that require it.
Configure Application Settings
- Navigate to Policies > Policy Components > Application Settings.
- Expand an existing policy or click Add to create a new policy.
- Select application categories to be blocked, or expand a category to select specific apps.
When some, but not all apps in a category are blocked, the checkbox next to the category shows a dash. When all apps in a category are blocked, the checkbox shows a checkmark. When no apps are blocked, the checkbox is empty.
Clicking the gear icon to the right of the app will show the option to Block or Allow the app. Click Apply to apply the selected setting.
- When settings are changed and saved in an existing policy, the Application Control Change Summary appears. Click Proceed after reviewing the summary.
Not All Apps Can Be Blocked
Apps that are not present in application settings, or do not have the Edit app controls, Control this app or Block this app option in App Discovery cannot be blocked. If you need to block an app we don't have yet, contact umbrella-support@cisco.com to request it.
- Navigate to Reporting > Additional Reports> App Discovery.
- From the overview, click the number of unreviewed apps. The App Grid appears.
- Search for or choose an app to edit the app control settings. The app must be Blockable, which requires Edit app controls, Control this app or Block this app be visible in the Label column.
Block this app
Appears when no edits to this app's settings have been managed yet.
OR
A red tooltip icon will appear if the app setting is configured but has not yet been applied to a policy.
Control this app
Appears when no edits to this app's settings have been managed yet.
OR
A red tooltip icon will appear if the app setting is configured but has not yet been applied to a policy.
Edit app Controls
Appears when the app has already had settings configured but can be edited.
- Click on Edit app controls, Control this app or Block this app to open the application settings. This can also be done within App Details.
- In the window that appears, select which application settings to block the app in.
Note: For more application blocking options, use application settings.
- (Optional) Check Label application as and select a label if you want to set a label in addition to blocking the app.
- Click Save.
Gather Details About an App < Block Apps > Blockable Apps