Web Proxy Overview

Venn’s Blue Border includes a local web proxy running on the user's device which plays a critical role in monitoring and controlling network traffic, enforcing policies, and maintaining security.

The proxy enables the following:

Web Traffic Logging

The web proxy logs all network traffic in Blue Border. You can view logs of all sites visited by your users in Blue Border and any actions taken by your web proxy in Venn. Learn how to view logs on the Web Proxy Policy Admin page.

You can also view logs of all DNS queries made by your users in Blue Border by IP address and any actions taken by your web filtering policy.

Web Control (Blocklist/Allowlist)

Using the web proxy, you can control which websites or IP addresses can be accessed in browsers running in Venn. You can block specific URLs or IP addresses or you can even block all web traffic by default and implement an allowlist to enable access only to specific URLs or IP addresses as part of your Web Proxy Policy. Learn how to configure Web Control (Blocklist/Allowlist).

If you want to control access to sites categorically (e.g., gambling or hate speech) and/or you want to allow or block sites at the domain level, we recommend that you use the Web Filtering Policy instead of the Web Proxy Policy, which is designed to block/allow specific URLs and IP addresses. Learn how to configure your Web Filtering Policy.

TLS Inspection

TLS inspection is selectively enforced by the proxy. By default, Venn enforces TLS inspection for specific processes managed by Venn, including web browsers and Microsoft 365 applications. This allows Venn to enforce DLP Policies such as account controls and upload restrictions. You can determine which additional processes have TLS inspection enforced and manually exclude domains from inspection as part of your Web Proxy Policy. Learn how to configure TLS Inspection.

Account Access Management

The proxy allows you to control which accounts can be used for authentication into Microsoft 365 and Google Workspace in Blue Border. You can configure whether these services are blocked completely, only allowed for specific business accounts, or completely open as part of your Account Access Data Loss Prevention Policy. Learn how to manage account access.

File Upload Control

The proxy allows you to restrict file uploads in Blue Border. You can prevent users from uploading files in their browser or specify specific domains where files can be uploaded as part of your Browser Uploads Data Loss Prevention (DLP) Policy. Learn how to control file uploads.

Was this article helpful?