Request blocked by Filtering Service

The HTML source for the more information block page shows information about who requested the site, and what criteria were used to manage the request. Specifically, it shows:

  • The user name and source IP address of the request (if available), and the time (in the format HH:MM) that the request was made.
  • Which policy is being applied to the request, and whether the policy is assigned to the user, group, domain, computer (individual IP address), or network (IP address range).

    If more than one group policy could apply, the message also states whether the Use most restrictive group policy setting is in use. See Configuring filtering settings.

  • What aspect of the policy caused the request to be blocked (for example, category, limited access filter, or cloud app filter, file type, keyword, bandwidth usage).
  • The name of the role in which the policy was assigned.
  • What resource was used to categorize the site (Forcepoint URL Database, real- time database update, a regular expression included in a real-time database update, custom URL, keyword, Content Gateway analysis, and so on).
For example:
User Name: LDAP://subdomain.company.com 
OU=Users,OU=HQ,DC=company,DC=copy/Lastname\, 
First Source IP Address: 10.12.132.17 Current Time: 15:30
This network (10.12.132.0 to 10.12.132.255) is filtered by 
policy: role-8**Default. The policy includes a category or 
limited access filter for the current time.
This policy is associated with role: Super Administrator. 
The request was categorized by: Forcepoint URL database.

Here, the block action is based on the Default policy because no policy is assigned to the user or IP address. The policy assignment was performed in the Super Administrator role, and the requested site was categorized by the Forcepoint URL Database.