Domain category blocking triggered

Domain category blocking triggered
Webhook

Request

Security

X-Signature

Headers

X-Signaturestringrequired

Example:X-Signature: t=1492774577,v1=5257a869...

Bodyapplication/json

A domain category blocking rule was triggered for an employee.

versionstring

The version of the event.

Example:"1"

idstring, (uuid)

The unique identifier for the event. Use this as an idempotency key.

Example:"c478966c-f927-411c-b919-179832d3d50c"

tenantIdstring, (uuid)

The unique identifier of the tenant the event belongs to.

Example:"4f9d2e7a-1b3c-4d5e-8f6a-7c8b9d0e1f2a"

tenantMetadataobject(Tenant Metadata)

Key/value metadata set by the partner that manages this tenant. Only present for tenants managed by a partner. When a partner manages the tenant but has set no metadata, it is present as an empty object rather than omitted or null. A partner may set at most 10 entries, with keys up to 40 characters and values up to 256 characters.

Example:

{
  "customerRef": "ACME-001",
  "region": "emea"
}

timestampinteger

When the event occurred, formatted as a UNIX timestamp (in seconds).

Example:1698604061

categorystring

The category of the event.

Value:"CONTROL"

descriptionstring

The description of the event. Note: this is subject to change and should not be used to match on this object.

Example:"employee@example.com was blocked from casino.example.com"

objectstring

The object that was created.

Value:"DOMAIN_CATEGORY_BLOCKING"

friendlyNamestring

The friendly name of this object. Note: this is subject to change and should not be used to match on this object.

Example:"Domain category blocking"

newobject(Domain Category Blocking)

Domain category blocking event details.

Payload

{
  "version": "1",
  "id": "c478966c-f927-411c-b919-179832d3d50c",
  "tenantId": "4f9d2e7a-1b3c-4d5e-8f6a-7c8b9d0e1f2a",
  "tenantMetadata": {
    "customerRef": "ACME-001",
    "region": "emea"
  },
  "timestamp": 1698604061,
  "category": "CONTROL",
  "description": "employee@example.com was blocked from casino.example.com",
  "object": "DOMAIN_CATEGORY_BLOCKING",
  "friendlyName": "Domain category blocking",
  "new": {
    "employee": {
      "id": "2a2197de-ad2c-47e4-8dcb-fb0f04cf83e0",
      "email": "john.hill@example.com",
      "firstName": "John",
      "lastName": "Hill",
      "department": "Security Engineering",
      "location": "New York",
      "licensed": true,
      "chatopsEnabled": true,
      "creationTimestamp": 1698669223
    },
    "domain": "casino.example.com",
    "url": "https://casino.example.com/play",
    "categories": [
      {
        "code": 24,
        "name": "Gambling"
      }
    ],
    "mode": "MONITOR",
    "action": "DISPLAYED",
    "domainCategoryBlocking": {
      "title": "Access restricted",
      "subtext": "The domain casino.example.com is categorized as Gambling...",
      "buttonText": "Continue anyway"
    },
    "sourceIpAddress": "8.158.25.38",
    "userAgent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 Edge/16.16299",
    "os": "MACOS",
    "browser": "CHROME"
  }
}

Responses

Return any 2XX status to indicate that the data was received successfully