Configure the Web Control Options policy to enable or disable the web protection, configure logging preferences, and enforce actions for specific scenarios.
Log on to the ePO - On-prem sever as an administrator.
From the Policy Catalog page, select Endpoint Security Web Control as the product, then select Options as the category.
Click New Policy, type a name for the policy, then click OK.
On the Policy Catalog page, click the policy that you created, then define these settings.
In ...
Configure...
Web Control
Enable Web Control — Enables or disables Web Control on managed Mac systems.
Event Logging
Log web categories for green rated sites — Logs content category details for the green-rated sites that you access.
Log events for allowed sites configured in the Block and Allow List — Logs events for sites listed in the Block and Allow List with Allow permission.
Action Enforcement
Apply this action to sites not yet verified by Trellix GTI:
Allow — Allows access to unverified sites
Block — Blocks access to unverified sites
Warn — Displays a warning for unverified sites. You can either select Continue or Cancel the navigation.
Blocks site by default if Trellix GTI ratings server is not reachable — Blocks access to sites if Trellix GTI is not reachable for site rating.
Blocks phishing pages for all sites (Includes Allowed sites and overrides content rating actions) — Blocks access to phishing sites although the Block Allow List allows access to the site and the content rating is enabled.
Exclusions
Allow all IP addresses in the local network — Allows the IP addresses of the local network.
Specify IP addresses or ranges to exclude from Web Control rating or blocking — Excludes the IP addresses from Web Control rating and blocking.
Note
Specify only a single IP address or the IP address range. The software doesn't support Classless Inter-Domain Routing (CIDR) IP address format.
Click Save.