About whitelist reporting SWG ignores all traffic for a whitelist entry. SWG does not filter that traffic. SWG does not log that traffic. To identify IP addresses in the Whitelist, SWG in Inline mode examines TCP headers. For all other whitelist and blacklist entries in either Inline or SPAN/Tap mode, SWG parses HTTP headers.
About SWG blacklist and whitelist capacity SWG does not enforce a capacity limit for either whitelist or blacklist entries.
About IP addresses and domains SWG will accept apparently invalid IP addresses and treat them as valid Fully Qualified Domain Name (FQDN) addresses. It is possible to enter or import the address 256.256.256.256. For more about why this is acceptable behavior, please see "11. Name Syntax" within RFC2181. SWG behaves in this fashion within the Blacklist and Whitelist pages and throughout the policies, including the policy exceptions.
About the structure of the import file
The text file you import should contain a single IPv4 address or hostname per line.
If you attempt to import a file which does not conform to this format, SWG will not import any of the entries in the import file. Instead, SWG will display "An error was encountered while reading the whitelist file: '<
>' is not a domain name or IP address.", where '<
>' is the first entry in the file which does not meet this format requirement. If you have multiple entries that do not match the expected format, you will have to fix an entry, attempt upload again, then repeat until all entries comply with the format.
After building a test file with the following wrong format:
we got an error message like: "An error was encountered while reading the whitelist file: 'google.com;18.104.22.168' is not a domain name or IP address."
After building a test file with the format:
All the domains and IP addresses were uploaded normally.
Imported Document ID: TECH97566
Subscribing will provide email updates when this Article is updated. Login is required.