How do I use Shield to secure my network?

Shield offers several ways to protect your users and your network from malicious websites and inappropriate content.

This article covers the following topics:

• Shield Overview
• Online Protection
• Managing Security Events
• Advanced IoT Protection
• Adblocking
• Content Access

Shield Overview

From the Home screen, the Shield widget gives you a quick view of the security of your network.

Selecting the Shield tab and Digital security from the bottom of the screen will provide a more detailed view.

Online Protection

Online protection uses a constantly updated database of websites known to contain:

• Malware and Botnets
• Phishing and fraud
• Spyware and Adware
• Spam URLs
• Keyloggers and monitoring
• Proxy avoidance
• Anonymizers

Online Protection also protects devices from connecting to harmful IP addresses and blocks both incoming (Intrusion Protection) and outbound (Outbound Protection) device connections to known harmful IP addresses.

To enable or disable Online Protection for your entire network:

1. Select Settings from the Home screen.
2. Tap Online protection.
3. Tap the toggle switch to toggle the feature on or off.

To enable or disable Online Protection for a specific employee:

1. Select the Zones tab from the bottom of the screen.
2. Select the Employee zone.
3. Select the desired employee.
4. Select the options button (three dots at the top right).
5. Select Edit profile.
6. Select Online protection.
7. Tap the toggle switch to toggle the feature on or off.

To enable or disable Online Protection for a specific device:

Note: This option is only available if the device has not been assigned to a user. Assigned devices will all share the access settings for their assigned employee’s profile.

1. Select the Zones tab from the bottom of the screen.
2. Select the Employee zone.
3. Select the desired device.
4. Select the Options button (three dots at the top right).
5. Select Device settings.
6. Select Online protection.
7. Tap the toggle switch to toggle the feature on or off.

To approve or block specific websites or IP address:

1. Select the Shield tab and Digital security from the bottom of the Home screen.
   
   
   
2. Select a specific user, or select All.
   
   
   
3. Select the Approve or Block tab.
4. Select Approve/Block.
5. Select Website or IP Address.
6. Enter the URL or IP address you wish to approve or block.
7. Select Approve/Block.

Note: After approving or blocking a website/URL, the change may take 30-60 minutes to go into effect (the time may vary on different devices on your network).

Managing Security Events

The Shield tab also displays a graph and list of security events that have taken place over the last 30 days. Tap on the graph to highlight a specific date, tap on an employee profile to filter by person, or tap on an event type to filter by type.

Tapping on a specific event will give you the option to approve it for the user who was blocked, or for everyone.

Advanced IoT Protection

IoT (Internet of Things) Protection studies device behavior to block actions that may be suspicious and protect your network. If a device normally only accesses certain domains but is now trying to access a domain that was previously unknown it would be quarantined and a notification would be sent to the user. While in quarantine the device will maintain internet connectivity, but will not have local access so it cannot infect other local network devices.

To view quarantined devices so they can be tested and unquarantined if appropriate:

1. Open the Zones tab.
   
   
   
2. Select the device under Quarantined devices.
   
   
   
3. From here you can view more detail on the suspicious activity and take appropriate action.
   

Adblocking

Adblocking blocks known advertising servers, although the websites themselves will continue to be displayed without certain ads.

Just like Online Protection, this can be enabled for your entire network from the Settings menu, or for an individual employee or device through the Employee zone.

Content Access

Content Access prevents users from visiting sites that may not be appropriate in the workplace.

Just like Online Protection, this can be enabled for your entire network from the Settings menu, or for an individual employee or device through the Employee zone. Individual websites and IP addresses can also be approved or blocked through Shield.