Configure Destination Lists

Note: Multi-org console accepts and saves integration lists and destination lists for Secure Web Gateway (SWG) organizations. However, it does not affect any SWG policies that are attached to them. The configuration changes of SWG organization which belongs to a Multi-org are done at SWG organization level in the specific SWG organization.

A destination list is a list of internet requests (for example, domain name or IP address) that is used to manage—block or allow—org access to specific internet destinations.

Allow list entries always take precedence over block list entries. Allow lists also take precedence over security related blocks, so if you feel a domain is being blocked incorrectly, adding it to an allow list will let you access it while you investigate or report it to support.

• Blocking domain.com and adding mail.domain.com to an Allow List will still allow mail.domain.com.
• Adding domain.com to an Allow List and blocking sub.domain.com will still allow sub.domain.com.

If you add domain.com to a block list, and add mail.domain.com to an Allow list, assuming both lists are applied on the same policy, we will still allow mail.domain.com.

We recommend adding domains in the format "domain.com" rather than www.domain.com to ensure *.domain.com is included (a wildcard is implicit). However, if you only wish to block subdomain.domain.com, then be more specific when you define the entry here. You can also bulk upload destinations. See Bulk Upload Destinations.

For block lists, you can also block URLs. For more information about blocking URLs, see Control Access to Custom URLs.

1. Navigate to Centralized Settings > Destination Lists.

2. Click Add a Setting and choose either Add Block List or Add Allow List or expand an existing destination list setting.

3. Give your destination list a meaningful name, type destinations (for example, domain name) and click Add.
   Note: An entry such as "domain.com" will include all subdomains, such as "mail.domain.com", or "www.domain.com".
   If a domain exists in both a blocked and allowed destination list, the allow list takes precedence.

Once you've added an entry to your destination list, it appears in a list at the bottom of the card.

4. Click Add a comment to add a comment to an entry in your list. A comment can help you keep track of why you've added a particular entry to your destination list. Add a comment and click Save.
   Note: Your comment is limited to a maximum of 256 characters.

5. Click Continue.
6. Select the organizations with whom you want to share this destination list and click Continue.
   When shared with an org, these settings become available in the organization's Umbrella dashboard and can be selected when configuring policies. You can also choose not to share a destination list with orgs by clicking Continue without selecting any organizations.

7. From the Policy Settings page, choose how you would like to have this destination list applied to the Umbrella policies of both your existing organizations and any new organizations you might add. Choose from the following options:

• Set as Default Setting—If selected, this destination list will be applied to the default policy of any new organizations that you add. This setting is not applied to the default policy of existing organizations in Umbrella.
  Note: You must always have at least one default destination list and you can have more than one default destination list. Having more than one default destination list allows you to have more than one destination list automatically added to policies (for example, both an allow list and a block list) when you add new organizations. A destination list that has Set as Default Setting selected cannot be deleted until that setting has been de-selected.
• Apply to Default Policy—When selected, this destination list is applied only to the default Umbrella policy of the organizations you selected in the previous step—Share with Organizations. All other Umbrella policies for the selected organizations remain the same.
• Apply to All Policies—When selected, this destination list is applied to all of the Umbrella policies for the organizations you selected in the previous step—Share with Organizations. This includes the selected organizations' default policy.
  Note: When you select Apply to all Policies, the next time you access this setting it appears that it has reset to Apply to Default Policy. It has not and your Umbrella policies are not changed. Once configured, to change Apply to All Policies to Apply to Default Policy, you must select Apply to Default Policy and click Save & Close.

8. Click Continue.
9. Review your destination list settings and click Save & Close.
   Each link under Share Summary opens a modal window that lets you view which organization will share this destination list.

---

Manage Centralized Settings < Configure Destination Lists > Bulk Upload Destinations