Manually add new destinations (email domains and addresses, websites, and network paths) and divide them into groups for better organization. Use these groups in policies for more granular control.
Introduction
✍️Unassigned destinations contain destinations that were auto-detected in your environment.
But you can also add email domains and addresses, websites, and network paths manually.
In this article, you will learn:
How to manually add new destinations
- Go to Data destinations.
- To add new destinations either as Untrusted or Safe destinations: Click the three dots in the respective column header. Then click Add destinations.
- To add new destinations into a specific group: Click the group you want to add destinations into, then click the three dots in the group header. Then click Add destinations.
- You can add:
- Email domains - if adding multiple email domains or addresses, separate them with a comma.
- Websites - if adding multiple websites, separate them with a comma. If you enter just server.com, relevant policies will be applied to all subdomains (m, www, img, etc.). You can also use wildcards to specify patterns (e.g., *.google.com/*).
- Network paths - if adding multiple network paths, separate them with a comma.
❗If a destination already exists anywhere in Data destinations, it will not be added again.
FAQ
Q: In Data destinations, can I add a whole domain (e.g., @aircon.com.au) as a safe or untrusted destination?
A: Yes, you can add whole domains as safe or untrusted destinations. If you enter a domain (e.g., server.com), relevant policies will be applied to all subdomains (m, www, img, etc.). You can also use wildcards to specify patterns (e.g., *.google.com/*).
Q: Can I add a git repository to safe destinations? How do I manually add a git address to safe destinations?
A: Yes, you can manually add the address of a git repository to safe destinations.
Go to Data destinations > Add destinations > Website. Here you can enter your repository address in the HTTPS format (e.g., https://organization@dev.azure.com/organization/project/_git/repository). Safetica does not support SSH format yet.
Q: Can I add external hard drives (HDD) to safe or untrusted destinations?
A: Yes, you can add them, as long as they are "USB mass storage". Just connect them to your computer - they will be detected and appear in Unassigned destinations. From there, you can move them to either Untrusted or Safe destinations as needed.
Q: Can I add a range of IP addresses or network paths to safe or untrusted destinations? Can I use a subnet mask when adding IP addresses or network paths to safe or untrusted destinations (e.g., 10.10.10.0/24)?
A: No, adding IP ranges or subnet masks is not supported. You can only add specific IP addresses or network paths without a subnet mask (e.g., 10.10.10.1 or \\10.10.1.1\)
Data destinations: define your perimeter
Destination management: How to move, copy, or remove destinations
Group management: How to add, rename, move, and delete groups