Before You Enable Graph DefenseLearn how the greywall defense blocks threats.
Any asset in an active ALLOW OR BLOCK list will take priority over this feature.
We highly recommended that you train your Greywall until new hosts plateau before enabling Graph Defense.
Use the Dashboard for a company to become familiar with the number of new hosts discovered per day.
Once your new host discovery plateau for 3 days, you should be able to proceed enabling this feature to GREEN & YELLOW Mode.
Graph Defense SettingsGraph Defense is an additional layer of defense. It does not ignore security categories.
GREEN
The Green setting is to limit the greywall delay. Any newly observed domain ranking inside this range will avoid a greywall event.
YELLOW
The Yellow setting is where the greywall delay starts. The greywall delay in your policy will determine the time of delay a new host name or domain can be accessed.
RED *
The Red setting is where all sites lower than this ranking will be immediately blocked.
*RED is a HIGHLY restrictive feature and this will block traffic from all domains ranking outside of RED.
You will have make sure all the traffic that you want accepted is either inside the GREEN OR YELLOW ranking. Otherwise, you will have to ALLOW LIST the host names or domains to be accepted.