Site Access Control – Beta

What is Site Access Control #

The Shield is an extension deployed to the end-users. This extension allows the Admins to manage and track the browsing activity of all the users where Shield is deployed.

GAT Shield can also be used as a web-filtering tool that the Admins can use. The web filter in GAT Shield is called Site Access Control.

Site Access control allows the Google Workspace Admins to create different rules to block the users from browsing particular websites.

Site Access Control – Beta version #

Navigate to GAT Shield > Configuration > Site Access Control (Beta)

User-defined categories #

In the “User-defined categories” we can set up a category (list) of sites that we want to Block or Allow.

When the category is created it can be used for Allow or Block rule.

Upload custom category #

The Admin can upload a spreadsheet with multiple websites to be blocked.

Navigate to Shield > Site Access Contol (Beta) > User defined categories > Upload custom cateogory

Select Upload custom category and a pop-up window will be displayed.

Fill in the details

  • Category name – enter a name for the category
  • Description – enter a description for the rule
  • Create a new spreadsheet – click to create the spreadsheet with the added name and description
  • Click on the Edit spreadsheet when created

The spreadsheet will be opened, fill in the URLs  (websites) you want to block.

Close the sheet and click on the Create button.

The Custom category will be added to User-defined categories.

Click on the + button to create the rule (activate)

Add a new category #

Navigate to User-defined categories > Add a new category 

A pop-up window will be displayed.

Fill in the details required

  • Category name – enter a name for the category
  • Description – enter a description for the category
  • Site list – enter the sites you want to add to the category
    • Match type – select the match type of the URL
      • Contains – enter part of a string that is contained within the URL
      • Starts with – enter a URL that starts with the typed URL
      • Equals – enter the URL that equals the one added
  • Add a new URL – click to add more URLs to the category

  • Create – click when the list is ready and you want to create the category
Activate the created category #

To activate the category and create a rule click on the + button > Create rule

A pop-up window will be displayed to add a new rule.

Fill in the details

  • Rule name – enter a rule name
  • Category – the selected category will be displayed
  • Active – toggle to activate or deactivate the rule
  • Description – enter a description for the rule
  • Action – select the action to Block or Allow the category

  • Redirect URL – enter a URL where the browser will redirect to
  • Time restriction – select a time range during which the rule will be active. The default timezone is used.
    • You can combine and select one day. The rule can be set up to block from 9:00 to 13:00 and then on the same day from 18:00 to 23:00.
  • Scope – select the users for whom the rule will be active for
    • User – select individual users
    • Group – a select group of users
    • Org. Unit – select an organizational unit of users
    • Chrome devices only – enable or disable the rule for only Chrome devices

  • Createclick to create and activate the rule to block the selected users from all the selected sites in the category.

The rule will be created and saved in the Rules tab.

Result for end-user #

When the users try to visit the selected sites, they will not be allowed and will receive a blocked page message instead.

Rules #

In the Rules tab, you can view all the active rules that are set and add a new rule 

Navigate to Rules > Add a new rule

A pop-up window will be displayed to add a new rule.

Fill in the details

  • Rule name – enter a rule name
  • Category – click and select the category needed
    • choose from any of the custom and system categories created
  • Active -toggle to activate or deactivate the rule
  • Description – enter a description for the rule
  • Action – select the action to Block or Allow the category

  • Redirect URL – enter a URL where the browser will redirect to
  • Time restriction – select a time range during which the rule will be active. The default timezone is used.
    • You can combine and select one day. The rule can be set up to block from 9:00 to 13:00 and then on the same day from 18:00 to 23:00.
  • Scope – select the users for whom the rule will be active for
    • User – select individual users
    • Group – a select group of users
    • Org. Unit – select an organizational unit of users
    • Chrome devices only – enable or disable the rule for only Chrome devices

  • Createclick to create and activate the rule to block the selected users from all the selected sites in the category.

The rule will be created and saved in the Rules tab.

The rules can be removed or updated from the “blue buttons” on the right side.

Result for end-user #

When the users try to visit the selected sites, they will not be allowed and will receive a blocked page message instead.

System defined categories #

System-defined categories are categories that cover thousands of different sites divided into different categories.

Those are set of URLs that are covered and separated by different category sets of URLs

Activate system category #

Pick any of the system categories and click on the + button > Create rule

A pop-up window will be displayed to Create the rule

Fill in the details

  • Rule name – enter a rule name
  • Category – the selected category will be displayed
  • Active – toggle to activate or deactivate the rule
  • Description – enter a description for the rule
  • Action – select the action to Block or Allow the category

  • Redirect URL – enter a URL where the browser will redirect to
  • Time restriction – select a time range during which the rule will be active. The default timezone is used.
    • You can combine and select one day. The rule can be set up to block from 9:00 to 13:00 and then on the same day from 18:00 to 23:00.
  • Scope – select the users for whom the rule will be active for
    • User – select individual users
    • Group – a select group of users
    • Org. Unit – select an organizational unit of users
    • Chrome devices only – enable or disable the rule for only Chrome devices

  • Createclick to create and activate the rule to block the selected users from all the selected sites in the category.

The rule will be created and saved in the Rules tab.

Result for end-user #

When the users try to visit the selected sites, they will not be allowed and will receive a blocked page message instead

IP Blocking #

IP Blocking is part of Site Access Control that allows Admins to block URLs that appear as IP addresses.

  • Block all URLs that appear as:
    • Public IP addresses – toggle on or off to activate or disable the rule
    • Private IP addresses – toggle on or off to activate or disable the rule
      • Scope type – select the users who will be affected by this rule
        • User – enter an individual user
        • Group – enter a group of users
        • Org. Unit – enter org. unit of users
    • Create – click on to create the rule

Result for end-user #

When the users try to visit the selected sites, they will not be allowed and will receive a blocked page message instead

Block page config #

The section allows configuring a message that would be shown to the user while blocking the page on his device. Displaying category used for blocking also could be configured.

  • Display category details – enable or disable the details to be shown to the end-user
  • Custom message – enter a custom message to be displayed to the end-user

Block all URLs for users #

Under the System Defined Categories, we have a special category called ALL

This is a special category that represents ALL URLs.

Meaning it will allow to block users from accessing any URLs they use while Shield is active on the user account and they are using the Chrome browser.

To block users from all URLs select the special “all” category.

Click on the + button to create a rule (3)

A pop-up window will be displayed to Create the rule

Fill in the details

  • Rule name – enter a rule name
  • Category – the selected category – ALL – will be displayed
  • Active – toggle to activate or deactivate the rule
  • Description – enter a description for the rule
  • Action – select the action to Block

  • Redirect URL – enter a URL where the browser will redirect to
  • Time restriction – select a time range during which the rule will be active. The default timezone is used.
    • You can combine and select one day. The rule can be set up to block from 9:00 to 13:00 and then on the same day from 18:00 to 23:00.
  • Scope – select the users for whom the rule will be active for
    • User – select individual users
    • Group – a select group of users
    • Org. Unit – select an organizational unit of users
    • Chrome devices only – enable or disable the rule for only Chrome devices

  • Createclick to create and activate the rule to block the selected users from all the selected sites in the category.

The rule will be created and saved in the Rules tab.

Result for end-user #

When the users try to visit any website, they will not be allowed and will receive a blocked page message instead

All the pages the users try to visit will be blocked.

Allow list #

Allow lists to take precedence over the blocklist.

If a site is blocked by a block rule, and there is a rule to allow the same site, the rule where the site is allowed will take precedence

The block rule below contains 3 social media sites that will be blocked.

All the social media sites added to the category will be blocked.

If there is an allowed list for one of the sites above, it will take precedence and the site will be allowed.

The site added to the “allow” list will be allowed while the other remains blocked.

This website uses cookies to ensure you get the best experience on our website