Targeted Threat Protection - URL Protect - Managed URLs

This guide describes how to use Targeted Threat Protection - URL Protect's managed URL functionality to add a domain or URL to a block or allow list. A managed URL is a domain or URL you want to apply a block or allow action to. This action overrides the real-time action decided upon when a link is clicked.

Considerations

• • • If you need to exclude specific senders or recipients from a URL Protect Policy, we recommend looking at: URL Protect - Bypass Policies.
    • If you need to block a URL containing a query string, the block will only function as expected when the query string is removed.
    • Managed URL applies blocks to any redirected URLs.
    • Managed URLs are used in the category scan, and if any of the redirected URLs match, we will mark them as malicious and take the appropriate policy action; if this is set to warn, we will notify the end user rather than block them.

Listing Managed URLs

To list your managed URLs:

1. Log in to the Mimecast Administration Console.
2. Navigate to Services | URL Protection.
3. Click the URL Tools drop-down.
4. Click Managed URLs. A list of managed URLs is displayed.

To add one or more URLs and/or domains to your Managed URLs list:

1. Click Add Managed URLs.
2. Complete the dialog as follows:

Field / Option	Description
Override Type	This specifies the type of override to be applied to the URLs or domains. The options are: Blocked: The override blocks access to the URLs and/or domains. Permitted: The override allows access to the URLs and/or domains.
Disable Rewriting For This Entry	If the option is enabled, Mimecast will rewrite the URLs, and if the option is disabled, Mimecast will not rewrite the URLs. If unselected, URLs are rewritten regardless of the domain or URL type. This option is only available if the Override Type option is set to Permitted.
Disable User Awareness	If user awareness is enabled, this option disables it for the specified URLs and/or domains. As a result, they are not checked for threats. This option is unavailable if the Disable Rewriting For This Entry option is selected.
Match Type	This specifies the type of domain match. The options are: Domain: Allows or blocks URLs from a single domain. Explicit: Allows or blocks specific URLs.
URLs	Specify the URLs and/or domains to be added to the managed URLs list. If you enter a duplicate managed sender URL, a message appears asking if you would like to overwrite the existing entry. Domains must have a "http://" or "https://" prefix (e.g. http://www.mydomain.com).If the domain is not complete with a prefix, a warning message appears stating the URL is invalid. If the " HTTP:// " version of the URL is Blocked/Allowed, the secure version of the URL " HTTPS:// " will also be Blocked/Allowed and vice-versa, where the secure version "HTTPS:// " is Blocked/Allowed, the " HTTP:// " version is Blocked/Allowed as well. A single wildcard may be used at the start of the domain followed by a dot (e.g. https://*.subdomain.domain.com). Unsupported wildcard uses are domain., *domain.com, *subdomain.com, and www.*.com. The use of wildcard characters is not recommended, as it can cause a significant security risk.
Comments	Enter a comment about the Managed URL record. This is recorded in the audit log.

3. Click Save and Close.

Changing Managed URLs / Domains

With your managed URLs listed (see the "Listing Managed URLs" section above), you can change a managed URL record from the list:

1. Click on the  icon next to the managed URL.
2. Click Edit. The managed URL record is displayed.
3. Change the record as required (see the "Adding Managed URLs / Domains" section above).

   The fields displayed depend on whether the managed URL record has the Override Type set to Blocked or Permitted. The Override Type cannot be changed.

4. Click Save and Close button.

Removing Managed URLs / Domains

With your managed URLs listed (see the Listing Managed URLs section above), you can remove a managed URL record from the list:

1. Click on the  icon next to the managed URL.
2. Click Delete.

Searching the Managed URL list

With your managed URLs listed (see the "Listing Managed URLs" section above), you can search for existing managed URLs or domains.

This functionality allows you to:

• • • Search results views are customizable, so you only see the required information.
    • The results can be refined and filtered without resubmitting the search.

To search for existing managed URLs or domains:

1. In the Search field, enter the URL or domain.

   The entire domain or URL must be specified with no wildcard characters. Failure to do so will return no results.

2. Select the type of managed URL to search for by clicking either:

• • • • Domain or Comments
      • Only Domain. This is the default option.
      • URL

3. Click on the search icon. The results are displayed in the Managed URL list.

Exporting Managed URLs

Managed URL entries can be exported via an API. To do this, visit: Get Managed URL.

See Also

• • • Check & Decode URLs
    • URL Protect Dashboard
    • URL Protect - Bypass Policies