About WebGroups

WebGroups are groupings of domains and URLs, inserted into Distributed Cloud Firewall rules, that filter (and provide security to) Internet-bound traffic.

You must create WebGroups before creating any Distributed Cloud Firewall rules that utilize WebGroups.

To filter HTTPS traffic with a URL-based WebGroup, TLS Decryption must be enabled in the rule where the WebGroup is used.

When you navigate to Security > Distributed Cloud Firewall > WebGroups, a predefined WebGroup, Any-Web, has already been created for you.

webgroup default

This is an "allow-all" WebGroup that you must select in a Distributed Cloud Firewall rule if you do not want to limit the Internet-bound traffic for that rule, but you still want to log the FQDNs that are being accessed.

Creating WebGroups

To create a new WebGroup:

  1. On the Security > Distributed Cloud Firewall > WebGroups tab, click +WebGroup.

  2. Enter a name for the WebGroup.

  3. Select Domains or URLs.

  4. In the Domains/URLs field, enter the domains or URLs; you cannot mix them.

    • Domain examples: google.com, www.microsoft.com, *.amazonaws.com

    • URL example: github.com/AviatrixFieldEng/

  5. Click Save.

Editing a WebGroup

You cannot edit the Any-Web WebGroup.

  1. Click the Edit 25 icon next to a WebGroup. You can edit the Name, Type, and Domain/URLs of the WebGroup.

  2. Click Save.

Deleting a WebGroup

You cannot delete the Any-Web WebGroup.

  1. Click the Delete 25 icon next to the WebGroup.

  2. Click Delete to confirm you want to delete the selected WebGroup.