Configure DNS Filtering rules in OneView

Configure DNS Filtering rules using the Rules tab to customize security filtering and allowed domains across your sites and policies. The site option you select determines the policies available, selecting Global (All sites) provides global OneView policies, where selecting individual sites provides only site level policies. Configuring access for a domain will include its subdomains, but configuring access for a subdomain will not include the entire domain. 

Note: Global Administrators can manage global rules across OneView. Site Administrators can view all global rules and only manage site-specific rules. 

Create DNS Filtering rule

1. In the left navigation menu, click DNS Filtering.
2. In the top left, select the Rules tab.
3. In the top right, click the Add Rule icon +.
4. Enter a name for the DNS Rule.
5. Select all or specify a OneView site. 
6. Check the box for one or more policies. 
   Note: Each policy can only have one DNS rule applied.
7. Click Next. 
8. Expand Security categories to review and modify the preselected security categories. 
   Note: The recommended protection from Malwarebytes is enabled by default with the Use preconfigured settings toggle.  
9. Expand Content categories and toggle on all desired categories and subcategories to block. 
   Note: Expand the category's arrow icon  to toggle on specific subcategories without blocking the entire category.
   

   CAUTION - Blocking content categories such as Technology may cause popular business domains to be blocked mistakenly. For more information, see Technology content category. Confirm which category a domain belongs to by using the lookup domain categories field on the right.

10. Click Next.
11. Enter a domain or subdomain.
12. Click the plus icon . 
13. Click Next once all domains or subdomains have been added to the allow list.
14. Enter a domain or subdomain.
15. Click the plus icon . 
16. Click Complete once all domains or subdomains have been added to the blow list.

Note: Add domains to the allow list of your DNS rules if you require access to a domain that was blocked.

Watch this video to learn how to create DNS Filtering rules:

Categories

The available security and content categories are listed below. 

Security categories

Content categories

Technology content category

We advise against blocking the technology content category as most of the domains for My Account and e-commerce activity are included in that category. If you are blocking this category, add these to the allow list:

Return to DNS Filtering guide for OneView.