Block New Domains Adv. Licence

[AnythingHosted]

Hi, 

Is it possible to block new domains with the advanced security licence?

My partner received a text with what I know is a phishing site. It's 1 day old and is identical to the HSBC UK login page (I won't put the URL here for obvious reasons). Merkai didn't block the URL, presumably because it has not been assigned a category yet. I wonder how long it will take for it to be added?

I've had a few comments from clients as well that not everything they think should be blocked, is blocked. This makes it harder for me to justify the licencing costs. 

Here are my category filters

Thanks,

Chris

[Bruce]

I believe the category filtering still uses the BrightCloud feed. You can go to the BrightCloud website to check how a URL is being categorised and it’s reputation. I’m not sure how quickly they update the categories

If you want to block a URL before it gets categorised, you’ll just have to block it with the URL filtering. That should provide a temporary fix until it falls into a proper category.

[AnythingHosted]

Thanks. I submitted to BrightCloud and they came back within 2 hours! Impressive. 

Ah, I'll look at Umbrella, thanks for the suggestion. 

[KarstenI · Accepted solution]

Brightcloud is quite fast in adding new URLs when they are suggested in their system. In the past, I typically got answers after three to six hours.

If you want to block newly seen Domains, integration with Cisco Umbrella could be the solution.

[PhilipDAth]

It is not possible to block newly added domains.

You would need to use Cisco Umbrella to do that.