Configure DNS Filtering rules in OneView

Configure DNS Filtering rules using the Rules tab to customize security filtering and allowed domains across your sites and policies. The site option you select determines the policies available, selecting Global (All sites) provides global OneView policies, where selecting individual sites provides only site-level policies. Configuring access for a domain will include its subdomains, but configuring access for a subdomain will not include the entire domain. 

Note: Global Administrators can manage global rules across OneView. Site Administrators can view all global rules and only manage site-specific rules. 

Create DNS Filtering rule

1. In the left navigation menu, click Monitor > DNS Filtering.
2. In the top left, select the Rules tab.
3. In the top right, click the Add Rule icon +.
4. Enter a name for the DNS Rule.
5. Select all or specify a OneView site. 
   • Global (All sites): Choose this option if your sites are managed using global policies.
   • Individual site: Choose this option if your sites are managed using local site-level policies.
6. Check the box for one or more policies. The options in this list depend on the site selection in step 5. If a policy you're looking for doesn't appear, make sure the correct site is selected or that all your policies don't already have a DNS rule assigned to them.
7. Click Next to proceed to the Block List.
8. Review and remove unwanted security categories. For more information, see Security categories.
9. Enter or select domains, subdomains, top level domains, IP addresses, or Content categories to block and click Add.
   

   CAUTION - Blocking content categories such as Technology may cause popular business domains to be stopped mistakenly. 

10. Click Next to proceed to the Allow List.
11. Enter domains, subdomains, or IP addresses to allow and click Add. Once complete, click Next.
12. Review the rule and click Save rule once complete.

Notes:

• The maximum number of DNS rules is 50 per site.
• The allow list and block list have a limit of 4000 domains.
• Each policy can only have one DNS rule applied.
• Use the Bulk upload feature to upload a .CSV file with a list of items to add to the block or allow list. Use separate CSV files for different domain types.
• Add domains to the allow list of your DNS rules if you require access to a blocked domain.
• If entering IP addresses, only the domains associated with the IP address are blocked or allowed.

Categories

The available security and content categories are listed below. 

Security categories

Content categories

Confirm which category a domain belongs to by using the search domain categories field on the right.

Technology content category

We advise against blocking the technology content category as most of the domains for My Account and e-commerce activity are included in that category. If you are blocking this category, add these to the allow list:

Return to DNS Filtering.