Selecting Web destinations

 

Related topics: Configuring the Web Data Loss Prevention Policy Selecting Web destinations Defining policy owners

Select one or more Web sites to include in the policy on the Destination tab. When Data Security detects that someone is posting sensitive data to those Web sites, it triggers the policy.

Field	Description
Destination Sites
Any Web site	Select this option if you do not want sensitive data posted or uploaded to any Web site, without exception.
Web sites that belong to the selected categories	Select this option to prevent sensitive data from being posted or uploaded to known or potentially hazardous Web sites, but not to all Web sites. Expand a category to select or deselect specific site categories. Identified malware sites are Web sites that have been identified as containing malicious software, such as software designed to infiltrate a computer system without the owner's consent. Identified malware sites include: Botnets Keyloggers Malicious embedded Link Malicious embedded iFrame Malicious Web sites Phishing and other frauds Spyware Emerging Exploits Suspected malware sites contain potentially malicious or undesired content These include: Potentially unwanted software Suspicious embedded link Potentially damaging content Elevated exposure Illegal or questionable Data misuse sites are Web sites prone to misuse, intentional or not, by users. For example, users may post sensitive data to a message board or blog. Suspected data misuse sites include: Peer-to-peer file sharing Personal network storage and backup Instant messaging Message boards and forums Hosted business applications Web collaboration Web chat General email Organizational email Text and media messaging Blogs and personal sites Social networking Social networking and personal sites Uncategorized
Trusted Domains
Enable trusted domains	Select this check box if you do not want certain domains to be monitored, then click Edit to select the trusted domains. Websense Data Security does not enforce trusted domains. This means they can receive any type of sensitive information via HTTP, HTTPS, or other Web channels. Note that several SaaS domains are excluded from analysis by default. You can exclude more domains as needed or remove some from the exclusion list. You can also customize the list of resources that are excluded from Web policies by default. For more information, see Business Units.