On the email alerts for unblocks i occasionally see domains that say automatically unblocked but are found in blacklists. This is a little misleading. Domains found on blacklists should never be auto added to allow lists.
This also makes admins to manually verify if a specific domain is actually being blocked.
Hi @jwol1,
This sounds like a pretty cool feature—having the unblock request auto-allowlisting engine refrain from adding domains to the designated allowlist when those domains are already on a policy’s blocklist.
The challenges with this are:
Single List Limit: Currently, there’s no option to direct auto-unblocked domains to more than a single list.
Policy Variation: Admins often choose to block certain sites for some policies while allowing them for others. For example, Amazon.com may be auto-allowed because it has a positive assessment, but an admin may still want to block Amazon for specific policies.
Note: The assessments made for what is allowed by auto-allowlisting are found here: Auto Whitelisting Filtered Categories
Here are a few things to consider that may help achieve your goal:
Rule Precedence: Blocklists are higher up in the rule order than Allowlists in “Allow List” type policies. This means they take precedence, so anything intentionally blocked within a policy will stay blocked regardless of whether it is automatically unblocked by the auto-allowlisting feature.
Rule Toggles: You can turn off the designated auto-allowlist rule for any policy where you do not wish newly auto-added domains to be accessible.
Unblock Request Control: You can also disable the unblock request button for each policy individually if desired.
That said, please feel free to add this as a feature request in the forum here: Feature Requests - ADAMnetworks
Having multiple adaptive allow lists unique to each/some policies would be helpful. As asked for here [FEATURE] Per-policy AI Unblocking .