Showing results for 
Search instead for 
Did you mean: 

Allow access to a site that is in multiple categories and one of them is blocked.


In this example, we want to block Streaming and Downloadable Video, and need to:

  • Remove that category from the default steering exceptions to ensure it is steered to the Netskope cloud.

  • Identify which URLs you want to block and which you want to bypass. For most if not all the actual streaming content is hosted on, so for our example we are going to create a custom category with an exclusion to accommodate our use case. using as the exclusion to a custom News and Media category.

  • Create a custom URL list and call it “Streaming and Downloadable Video UL” (UL is for URL List) and add to it.

  • Create a custom category and call it “News and Media CC” (the CC is for Custom Category) and include the News and Media category and exclude the Streaming and Downloadable Video UL.

  • Create your policies with an allow for News and Media preceding a block for Streaming and Downloadable Video.

What will happen is any access attempt will match the News and Media CC and Streaming and Downloadable Video categories but since the News and Media CC allow precedes the block the attempt will be allowed.


Access attempts will match the News and Media CC exclusion and the attempt will flow through to the Streaming and Downloadable Video block and be denied.


This process can be augmented in any number of ways to accommodate multiple use cases. For example you could invert the logic and create a Streaming and Downloadable Video CC and and use that in your steering exception to only to Netskope and let the video route to the Inet without us.


Credits: DJ Koehler, Netskope SE Leader