You may have seen categories in your Enforcer reports. Below you will find an explanation for these categories.
Category | Description |
Adult | Sites containing explicit content |
Adverts | Sites hosting online adverts |
Anonymizer | Web based proxies and unblock sites to bypass firewalls content filters |
Big tech | Microsoft, Apple and Google applications |
Big tech heavy | This category contains heavy bandwidth components of Big tech companies such as: YouTube Video, Android updates, Microsoft updates and Apple itunes. This category was designed to be used for lower priority shaping on congested Internet lines. |
Cdn | This category contains heavy bandwidth components of Big tech companies such as: YouTube Video, Video streaming, Android updates, Microsoft updates and Apple itunes. This category was designed to be used for lower priority shaping on congested Internet lines in the Saturation manager. |
Doh | This identifies DNS connections over HTTPS. Blocking this category is HIGHLY recommended at all times, because this ensures that connections are correctly categories into the other categories. For example, not blocking this DoH category will result in many connections being incorrectly categorised as suspicious or torrent category. |
Gambling | Online gambling sites |
Gaming | Online gaming related sites. |
Instant messaging | Instant messaging (IM) technology is a type of online chat that offers real-time text transmission over the Internet.-EXPERIMENTAL |
Movies | Torrent trackers and Movies/Music streaming/download sites |
Neutral | None of the other categories apply to these sites |
Risk | Known Malware or Phishing sites |
Security risk | This is LucidView IDPS detecton category. |
Social media | Facebook, Instagram, Twitter, Tiktok, etc |
Social media heavy | Facebook video, Instagram images |
Suspicious | A connection is regarded as suspicious when the host domain is unknown, and the connection is made on standard port. Typically VPNs, sometimes VOIP servers, and remote hacker connections are tagged in this category. |
Torrent | A connection is regarded as torrent when the host domain is unknown, and the connection is made on a nonstandard port. Typically DarkWeb, Torrent, some Gaming streams and Remote Unauthorised Hacker connections are identified in the category. |
Untrustworthy | This category is based on a sophisticated algorithm to detect DGA Malware types of connections. This is a popular way for remote hackers to gain access into networks. |
Vpn | Connections to Internet IP addresses making use of known VPN ports |
Youtube | YouTube and Google video |