Home Web Filtering Creating and Managing Filtering Policies

Creating and Managing Filtering Policies

Last updated on Apr 17, 2026

Creating and Managing Filtering Policies

Filtering policies are the core of KyberGate's web filtering. A policy defines what content categories, domains, and keywords are blocked or allowed for a group of devices or students.

Before You Begin

  • You need Admin or Policy Manager role in KyberGate
  • Ensure your devices are enrolled and assigned to device groups
  • Review the default policy to understand baseline filtering

Creating a New Policy

  1. Navigate to Settings → Filtering Policies in the KyberGate dashboard
  2. Click "+ New Policy" in the top right
  3. Enter a Policy Name (e.g., "Elementary School — Standard")
  4. Optionally add a Description explaining the policy's purpose

Step 1: Configure Category Blocks

  1. In the Categories tab, you'll see all 130+ content categories
  2. Toggle categories on (blocked) or off (allowed)
  3. Common categories to block for K-12:
    • Adult Content, Gambling, Drugs, Violence, Weapons
    • Social Media (optional — many schools allow during breaks)
    • Gaming (blocks 130+ game domains automatically)
    • Proxy/VPN (prevents filter bypass attempts)

Step 2: Add Custom Domain Rules

  1. Switch to the Domains tab
  2. Add specific domains to the Block List or Allow List
  3. Use wildcards for subdomains: *.example.com blocks all subdomains
  4. Domain rules override category settings (an allowed domain won't be blocked even if its category is blocked)

Step 3: Configure Keyword Blocking

  1. In the Keywords tab, add terms that should trigger a block
  2. Keywords are matched against page content, not just URLs
  3. Use phrases for accuracy (e.g., "how to make a weapon" vs. just "weapon")

Step 4: Set Schedule

  1. In the Schedule tab, define when the policy is active
  2. Options include:
    • Always active — 24/7 filtering
    • School hours only — Define start/end times per day
    • Custom schedule — Different rules for different days

Step 5: Assign to Groups

  1. In the Assignment tab, select which device groups this policy applies to
  2. A device can only have one active policy at a time
  3. Click "Save & Deploy" to activate

Managing Existing Policies

  • Edit: Click any policy name to modify its settings
  • Duplicate: Use the ⋯ menu → "Duplicate" to create a copy for a similar group
  • Disable: Toggle the policy off without deleting it
  • Delete: Remove the policy (devices revert to the default policy)

Policy Priority

When multiple policies could apply, KyberGate uses this priority order:

  1. Classroom overrides (Focus/Restrict mode in KyberClassroom)
  2. Device-specific policy (assigned directly to a device)
  3. Group policy (assigned to the device's group)
  4. Default policy (catches everything else)

Tips

  • Test before deploying: Use the Policy Simulator to enter any URL and see how it would be handled under a policy
  • Start restrictive, then loosen: It's easier to allow sites teachers request than to chase down everything that should be blocked
  • Use descriptions: Future admins will thank you for explaining why a policy exists

Troubleshooting

  • Policy not taking effect? Check that the device group assignment is correct and the device has synced recently
  • Site blocked that shouldn't be? Add it to the Allow List in the policy, or check if a keyword rule is triggering a false positive
  • Site allowed that should be blocked? Verify the correct category is enabled, or add the domain to the Block List manually

Related Articles

  • How Web Filtering Works in KyberGate
  • Using the Domain Checker
  • SafeSearch Enforcement
  • Managing Bypass Domains