Content Categories organize websites into categories based on the type of information served by the site; for example, gambling or social networking or alcohol. You limit identity access to web sites by selecting categories to block.
Web content categories are URL-based. Such that a web policy would match www.reddit.com to Online Communities, www.reddit.com/sports to Sports, and www.reddit.com/nudepics to Adult.
- Navigate to Policies > Policy Components > Content Categories and click Add.
- Give your Content Category list a good descriptive name and choose Web Policies.
- Select content categories to block and then click Save.
For a list of all categories and a description for each, see Web Content Category Settings.
Your new custom Content Category list is now available for selection when you add a Web policy.
Web content categories classify full URLs, whereas DNS content categories only classify at the domain-layer. This means that if a domain contains multiple types of content a DNS policy can only block what the domain was categorized at, irrespective of what other types of content might be served in that domain.
- www.example.com is categorized as Online Communities
- www.example.com/sports is categorized as Sports
- www.example.com/adultimages is categorized as Adult
A DNS policy configured to block Online Communities blocks the entire domain of www.example.com, but even if it is configured to block Sports or Adult instead of Online Communities it does not block access to these underlying URLs. This is because DNS only works at the domain layer.
However, a Web policy configured to block Online Communities and Adult allows access to www.example.com/sports because of URL-layer classification. Therefore, when creating a blend of Web and DNS policies to be applied to the same set of identities, content settings are more granular when enforced by Web policies than DNS policies and because web content is served over the web protocol, it is more pertinent to enforce content settings with a Web policy than a DNS policy whenever possible.
Updated 2 months ago