Xcitium offering

Web Protection

Cloud filtering for employee web traffic. Web filtering restricts access to malicious and phishing sites and unwanted content according to access policies.

Discuss your requirements ↗

**Web traffic overview**
Traffic charts, blocked threats and category metrics help teams monitor the results of their web policies.

Cloud-based web filtering

Apply web policy to users and content

Web traffic passes through a cloud filter that allows or denies access using URLs, keywords, ratings, categories, and lists. A roaming agent supports policy enforcement off network.

Stage 01

Route traffic to the filter

Web requests are redirected to a cloud server through DNS; a roaming agent supports filtering off network.

Output: Web request for inspection

Stage 02

Resolve user and content context

Rules can use user, group, location, and device context alongside URL, keyword, rating, and content category.

Output: Policy context for the request

Stage 03

Allow or deny by policy

Safe and block lists, default and custom policies, and settings such as Safe Search inform the access decision.

Output: Allowed or denied request

Stage 04

Show activity and report

Real-time browsing view, notifications, scheduled reports, export, and Syslog support help teams review activity.

Output: Activity view and report

From user request through policy decision to reporting

Users and devices

Office networkRoaming agent

Cloud filterDNS redirect

User · group · location · deviceURL · keyword · rating · category

Allow and block lists

AllowDeny

View · notifications · reports · Syslog

Capabilities

Capabilities with a specific purpose

URL, category, and rating filters

Web traffic is inspected and allowed or denied using URLs, keywords, ratings, threat categories, and allow/block lists. Organizations can also create custom categories.

User and device policies

Policies can be scoped by user, group, location, and device. Xcitium provides default and custom rules, Safe Search, and assignment through Active Directory groups.

Off-network filtering and cloud gateway

Xcitium provides off-network filtering and a roaming agent for Windows, Mac, and Chromebook, plus a cloud gateway using DNS redirection. Fit SaaS, dedicated infrastructure, and agent options to the existing network.

Application traffic prioritization

The gateway can manage and prioritize traffic, allocating bandwidth to critical business applications and limiting non-essential use. Define impact classes and exceptions in policy.

Visibility, reporting, and integrations

Troubleshooting and oversight use a real-time browsing view, dashboard, blocked-category email alerts, scheduled and exportable reports, Syslog, and APIs.

Compare approaches

Web gateway and endpoint control

Consideration	Web Protection	Endpoint protection
Control point	A user’s web request and internet access.	Processes and file activity on the device.
Decision signals	URL, rating, category, keyword, and user/device policy.	Process, file, and behaviour signals; exact capabilities depend on the endpoint product.
Off-network coverage	The roaming agent provides off-network web filtering. Include supported operating systems in the deployment plan.	Depends on endpoint agent deployment and telemetry.
Primary outcome	Allow or block a web request and report policy activity.	Detect, investigate, and respond to threats on the device.

Before you start

Plan a web filtering pilot

Start with a limited user group. Validate DNS redirection, roaming devices, Active Directory groups, business exceptions, and log flow together.

01
Which users, devices, and networks are covered by gateway and roaming policies?
02
Are DNS changes, TLS inspection, or internal application exceptions required?
03
Which categories are allowed, monitored, or blocked by default?
04
Who receives alerts, Syslog events, and reports?

Evidence for your evaluation

Web policies and visibility

The product provides URL and category filtering, roaming agents, policy management, and reporting.

In practice

Consistent web policy for branch and remote users

An IT team wants the same web rules for staff in an office and on the road. It evaluates DNS redirection and roaming-agent options against its current routing before choosing a deployment.

What your team gains

01
Filtering policies scoped to users and groups.
02
Threat and content categories with custom rules.
03
Live visibility, report export, and Syslog support.

Before you decide

Questions, answered

Can Web Protection cover off-network devices?

Xcitium provides a roaming agent and off-network policies for Windows, Mac, and Chromebook. Confirm supported platforms and agent requirements before rollout.

How are web requests filtered?

Requests can be allowed or blocked by URL, keyword, rating, and threat category. Xcitium also describes custom categories and allow/block lists.

How can teams investigate web activity?

The product lists a real-time browsing view, dashboard, blocked-category alerts, scheduled and exportable reports, Syslog, and APIs. Validate log retention and integration formats in a pilot.

Next step

Discuss your requirements

Tell us about your environment and priorities to discuss the right solution, pilot scope and rollout in Azerbaijan.