Step 5: Configuring a policy rule for URL categories

Add a rule that analyzes web traffic and select URL categories to apply.

Before you begin

Import the URL categories first. See Step 2: Import the URL categories.

Steps

  1. Go to the Main > Policy Management > DLP Policies page, select the policy to add the rule to, then select Add.
  2. On the General tab, enter a rule name and confirm that Enabled is selected.
  3. On the Condition tab, add the content classifiers that define what the rule looks for.

    To record all activity to the selected categories regardless of content, use a condition that matches any content.

  4. On the Severity & Action tab, set the severity and action plan.

    Choose whether to create an incident for every matched condition or to accumulate matches before creating an incident. Select an audit-only action plan to monitor activity without blocking it.

  5. On the Destination tab, select Web.
  6. Select Channels and confirm which channels the rule applies to.

    All web channels are selected by default, including Endpoint HTTP and Endpoint HTTPS. Those two carry the HTTP and HTTPS traffic seen by the endpoint agent. Clear any channel that the rule should not cover.


    Web channels, including Endpoint HTTP and Endpoint HTTPS
  7. Next to Include, select Edit.
  8. In the Select an Element dialog box, set Display to URL categories.

    Available URL categories lists the imported categories. Use Filter by to search; wildcards are supported. Categories that sit beneath a parent are shown as parent and child, separated by a chevron, for example AI Security* > Generative AI - Conversation*.

    To cover AI sites, select the AI Security parent category to include every kind of AI service, or select individual categories beneath it to narrow the rule. Any other imported category can be selected in the same way.


    Select an Element dialog box with Display set to URL categories
  9. Select the categories to analyze and move them to Include, then select OK.

    Adding any item overrides the default value of All. Categories can also be moved to Exclude to omit them from an otherwise broad rule.

    The selected categories are listed against Include on the Destination tab, each prefixed with URL Category:.


    Selected URL categories listed as the web destination of the rule
  10. Complete the wizard, save the policy, and click Deploy.

Result

The rule analyzes web traffic only when the destination URL maps to one of the selected categories.