Skip to content

URL allow list

You can add domains to the allow list so that URLs from those domains are neither rewritten nor scanned by Time of Click protection.

Go to My Products > General Settings, then click URL allow list.

The entire URL protection is bypassed. The URL isn't rewritten, and the Malicious URL scan action isn't applied. However, emails containing criminal category URLs will be deleted.

Note

If an email contains a link on the Internet Watch Foundation's criminal URL list, we're legally required to delete the email. We're also legally required not to show the link anywhere in Sophos Central, including Message History. See IWF: URL List.

We always delete these emails. We don't use the settings in your Email Security policies.

Add URLs

To add a URL or domain, click Add and enter the URL or domain you want to allow.

Example URLs and domains are as follows:

  • http://domain.com
  • https://domain.com/path
  • domain.com
  • example.net

Note

Wildcards are supported, for example, https://*.domain.com/path or *.domain.com. This includes all subdomains of domain.com, such as sub1.domain.com and sub2.domain.com.

Click Save to confirm the addition.

Delete URLs

To delete a URL or domain from the allow list, select it and click Delete in the upper right of the page.

You can select and delete individual or multiple URLs and domains, or all at once.