Skip to main content

Check out Interactive Visual Stories to gain hands-on experience with the SSE product features. Click here.

Skyhigh Security

Application Blocking - Block Access to Applications

You can block access to applications. When configuring the blocking, you select applications that are grouped as services in service groups that you have set up.

  1. On the user interface for Secure Web Gateway, select Policy > Web Policy > Policy.
  2. On the policy tree in the navigation panel, expand Application Control and select Application Blocking.

    The selected rule set appears in the configuration area on the right. 

  3. Configure when this rule set should apply.

    • Under Criteria, leave the default All traffic, as you want the rules in this rule set to apply to all types of web traffic.

    • Next to Applies to, leave the default Request, as you want the rules in this rule set to be processed in the request cycle of web filtering on Secure Web Gateway.


  4. Configure the rules for allowing coached access to applications that are preset in this rule set as needed. They are shown under Preset Rules in the Service Groups section. To configure these rules, you select the service groups you want to block.
    • Click Add Service Groups or the + icon.


      The Service Group window opens. It provides a list of the service groups that you have set up. 

    • Select one or more service groups. Then click Done.

    • If you want to change the block setting that is currently in use, click its name, which is shown marked in blue next to Select Block Setting. For application control rules, the default block setting is named Application Control.

      The block setting includes the parameters for the End User Notification Page that is sent to a user who submitted a request that was blocked.

      After clicking its name, a panel with a list of settings is inserted on the right.


    • Select a setting. Then click Save.

To enable or disable the complete rule set, use the On/Off toggles.

The filtering process will now follow what you have configured to block access to applications.