Networks - Blocked Locations

You can block device access to specific network locations, regardless of the subject category or risk level of the device. Mobile Security blocks destinations defined in your policies. It also enforces the block and report destinations from IOC Management.

In addition, you can set the severity level for the events generated when Mobile Security blocks access to these network locations and configure whether to show the event notification in the Mobile Security Protect app.

The following procedure describes how to add a network location to the Blocked Locations list.

  1. Go to Policy and select a policy profile.
  2. Click Network > Content Inspection > Blocked Locations.
  3. Click Add.

    A pop-up window appears.

  4. In the Location field, enter the network location in one of these formats (IPv4, IPv6, Domain Name (DN), DN/URL, + Wildcards).
  5. (Optional) Add your comments.
  6. Click Add.
  7. To import a list of network locations, click Import and upload the .CSV file with the locations list.

    Note:

    The uploaded list replaces the existing list. This allows you to import a list of locations from other systems, such as Firewall and Gateway, into Mobile Security policy.

  8. From the Severity Level for Blocked URL events drop-down list, select the severity level.
  9. From the Show Events in Clients drop-down list, select one of these:

    • Off (Default) - The end-user does not receive the event notification in the Mobile Security Protect app, when Mobile Security blocks access to the network location.

    • On - The end-user receives an event notification in the Mobile Security Protect app, when Mobile Security blocks access to the network location.

  10. To remove a network location from the list, select it and click Delete.
  11. To save the policy changes, click Save.
    Note:
    • You can add up to 100 entries to the Blocked Locations list.

    • If a domain in the blocked location is still accessible by the device, then the domain is in the default allowed list. Collect the device logs (see sk179614) and contact Check Point Support.