In this article

Use Allow and Block Lists to control query traffic by defining lists of domains to allow or deny within the organization. Even Internationalized Domain Names can be added, making these lists a key component of network security. Allow and Block Lists are the section of Filtering Policies that customizes what users can and cannot access.

Review the Filtering Policy hierarchy before creating Allow and Block Lists to make sure the policy configuration meets the desired outcomes.

Allow List and Block List entry format

Add up to 15,000 domains to the Allow List and Block List based on their Fully-Qualified Domain Name (FQDN), using the convention subdomain.example.org. Domains can be allowed or blocked at every level of the hierarchy. The following table describes each level.

Failure to follow this format can result in network error messages, or in domains not being allowed or blocked by the policy. 

FQDN formatting basics

The following table compares correct and incorrect entry formats.

Common Allow List and Block List scenarios

The following table describes common formatting scenarios.

Add to Allow or Block Lists

Upload entries to the Allow List or Block List list in three ways:

• Individual entry
• Bulk CSV import
• From the DNS Query Log

Add an individual entry

Add entries one at a time when including a note or completing quick requests to modify access. 

To add an individual entry:

1. From the DNSFilter dashboard, navigate to Policies and select Filtering.
2. Select the policy to edit, or select Add Policy to create a new policy.
3. Select the Allow List or Block List tab.
4. Select Add to List.
5. Enter the FQDN.

6. Optional: Add a note.

   Notes have a 512-character limit.

7. Select Add. 

   Repeat steps 1-7 for each domain.

8. Select Save Policy.
9. Select Continue to apply the update.

The entry is added to the policy.

List entry notes

The Notes field is useful to add detailed notes about why specific domains were added to a policy, such as an internal ticket request or a tools or software-related domain.

The note is not linked to the domain itself, which means that if a domain is deleted from a list and later re-added, the note will not re-populate. Notes do not display in other areas of the app, such as the DNS Query Log or Policy Audit Log. Notes can be edited after an entry is added by selecting Edit from the row Actions menu.

Import a CSV list

Add list entries in bulk, up to 2,000 entries at a time, with Import.

To import a CSV list:

1. Create a list of the domains to allow or block as a simple text file in a program like Google Sheets or Microsoft Excel, entering one domain per line.
   
2. Save the file as .csv.
3. From the DNSFilter dashboard, navigate to Policies and select Filtering.
4. Select the policy to edit, or select Add Policy to create a new policy.
5. Select the Allow List or Block List tab.
6. Select Import.
7. Select the .csv file.
8. Select Open.
9. Select Save Policy.
10. Select Continue to apply the update.

The list is added to the policy.

Export an Allow or Block List

Export a .csv file of the full Allow List or Block List of any Filtering Policy from the dashboard. Notes and Categories are not included in this download. 

To export an Allow List or Block List:

1. Navigate to the policy's Allow List or Block List tab.
2. Select Export.

The file downloads to the local device.