Create policy to block access using system hostname in UPE
search cancel

Create policy to block access using system hostname in UPE

book

Article ID: 273497

calendar_today

Updated On:

Products

Cloud Secure Web Gateway - Cloud SWG

Issue/Introduction

There is a requirement to create policies based on hostname instead of users, 

Environment

CloudSWG agent without SAML authentication 

CloudSWG policies are managed by a management center with universal policy enforcement(UPE)

Resolution

Below CPL block domain for the mentioned hostname. 

--------------------------------------

;Tab [Block with hostname]
#if enforcement=wss
          variable.x_client_device_names("$(x-client-device-name)")
define variable string x_client_device_names

define condition wssa-block-device
      variable.x_client_device_names.substring="HOSTNAME to block"
end

define condition block-domain
                url.domain=Enter.Domain.to.block
                 url.domain=Enter.other.Domain.to.block
end

<proxy>
condition=wssa-block-device condition=block-domain DENY

#endif


--------------------------------------