Viewing Category Definitions

You may have seen categories in your Enforcer reports. Below you will find an explanation for these categories.

Category Description
Adult Sites containing explicit content
Adverts Sites hosting online adverts
Anonymizer Web based proxies and unblock sites to bypass firewalls content filters
Big tech Microsoft, Apple and Google applications
Big tech heavy This category contains heavy bandwidth components of Big tech companies such as: YouTube Video, Android updates, Microsoft updates and Apple itunes. This category was designed to be used for lower priority shaping on congested Internet lines.
Cdn This category contains heavy bandwidth components of Big tech companies such as: YouTube Video, Video streaming, Android updates, Microsoft updates and Apple itunes. This category was designed to be used for lower priority shaping on congested Internet lines in the Saturation manager.
Doh This identifies DNS connections over HTTPS. Blocking this category is HIGHLY recommended at all times, because this ensures that connections are correctly categories into the other categories. For example, not blocking this DoH category will result in many connections being incorrectly categorised as suspicious or torrent category.
Gambling Online gambling sites
Gaming Online gaming related sites.
Instant messaging Instant messaging (IM) technology is a type of online chat that offers real-time text transmission over the Internet.-EXPERIMENTAL
Movies Torrent trackers and Movies/Music streaming/download sites
Neutral None of the other categories apply to these sites
Risk Known Malware or Phishing sites
Security risk This is LucidView IDPS detecton category.
Social media Facebook, Instagram, Twitter, Tiktok, etc
Social media heavy Facebook video, Instagram images
Suspicious A connection is regarded as suspicious when the host domain is unknown, and the connection is made on standard port. Typically VPNs, sometimes VOIP servers, and remote hacker connections are tagged in this category.
Torrent A connection is regarded as torrent when the host domain is unknown, and the connection is made on a nonstandard port. Typically DarkWeb, Torrent, some Gaming streams and Remote Unauthorised Hacker connections are identified in the category.
Untrustworthy This category is based on a sophisticated algorithm to detect DGA Malware types of connections. This is a popular way for remote hackers to gain access into networks.
Vpn Connections to Internet IP addresses making use of known VPN ports
Youtube YouTube and Google video