Manually add new destinations (email domains and addresses, websites, and network paths) and divide them into groups for better organization. Use these groups in policies for more granular control.
Introduction
Unassigned destinations contain destinations that were auto-detected in your environment.
But you can also add email domains and addresses, websites, and network paths manually.
How to manually add new destinations
- Go to Data destinations.
- To add new destinations either as Untrusted or Safe destinations: Click the three dots in the respective column header. Then click Add destinations.
- To add new destinations into a specific group: Click the group you want to add destinations into, then click the three dots in the group header. Then click Add destinations.
- You can add:
- Email domains - if adding multiple email domains or addresses, separate them with a comma.
- Websites - if adding multiple websites, separate them with a comma. If you enter just server.com, relevant policies will be applied to all subdomains (m, www, img, etc.). You can also use wildcards to specify patterns (e.g., *.google.com/*).
- Network paths - if adding multiple network paths, separate them with a comma.
If a destination already exists anywhere in Data destinations, it will not be added again.
FAQ
Q: In Data destinations, can I add a whole domain (e.g., @aircon.com.au) as a safe or untrusted destination?
A: Yes, you can add whole domains as safe or untrusted destinations. If you enter a domain (e.g., server.com), relevant policies will be applied to all subdomains (m, www, img, etc.). You can also use wildcards to specify patterns (e.g., *.google.com/*).
Q: Can I add a git repository to safe destinations? How do I manually add a git address to safe destinations?
A: Yes, you can manually add the address of a git repository to safe destinations.
Go to Data destinations > Add destinations > Website. Here you can enter your repository address in the HTTPS format (e.g., https://organization@dev.azure.com/organization/project/_git/repository). Safetica does not support SSH format yet.
Q: Can I add external hard drives (HDD) to safe or untrusted destinations?
A: Yes, you can add them, as long as they are "USB mass storage". Just connect them to your computer - they will be detected and appear in Unassigned destinations. From there, you can move them to either Untrusted or Safe destinations as needed.
Q: Can I add a range of IP addresses or network paths to safe or untrusted destinations? Can I use a subnet mask when adding IP addresses or network paths to safe or untrusted destinations (e.g., 10.10.10.0/24)?
A: No, adding IP ranges or subnet masks is not supported. You can only add specific IP addresses or network paths without a subnet mask (e.g., 10.10.10.1 or \\10.10.1.1\)
Read next:
Data destinations: define your perimeter
Destination management: How to move, copy, or remove destinations
Group management: How to add, rename, move, and delete groups