Use Manage Blocklist to stop users from visiting websites, or signing up for web apps, that you don't allow. You can block single domains, upload a list, or block whole categories, such as advertising, AI tools, or adult content.

To block apps and browser extensions instead, see Block Applications.

Swif enforces domain blocks differently on each type of device:

On computers, domain blocks work only in browsers with Swif Browser Security installed. Without it, domain blocks aren't enforced. See Deploy Swif Browser Security & Agentic Security Organization-Wide.

You can open Manage Blocklist from:

Manage Blocklist has three steps: Blocklist Queue, Device Selection, and Review.

Select one or more categories, then click + Add to Blocklist Queue.

Each category shows how many domains it contains. Click Preview to see its domains before you add it. In the preview, use Domain Category Lookup to check whether a domain, such as example.com, is in that category. Subdomains are included.

Turn on Block Sign-Up Only to let users visit a website, but stop them from signing up or signing in to it. Use this when people need a site for reference, but you don't want them creating accounts, such as with an unapproved SaaS tool.

Block Sign-Up Only works with entered domains, uploaded lists, and categories.

Select individual devices, device groups, or both. If you started from a device or a device group, it's already selected.

Review shows Your blocklist will apply to [N] devices, and what will be enforced on each, before you save.

Each domain, domain list, or category in the queue, with its Blocklist Rule: Domain, or Domain · Block Sign Up Only. Categories show how many domains they contain.

Device Scope lists each device, with its Rule Status (Ready to Enforce, Action Needed, Limited, or Not Supported), and Rule Coverage, such as "3 of 4 will be enforced". Device Group Scope lists each group. Expand it to see its devices.

Expand a device to see each rule's Enforcement:

If devices need something installed, Finish setting up coverage shows how many to fix:

You can fix these before or after you apply the blocklist.

If you've selected iPhones, iPads, or Android devices, Review also suggests MDM policies that filter websites instead. This is optional. Click Configure Policy to set one up, or Dismiss to hide the suggestions.

If you've selected fully managed Android devices, Review shows Swif VPN policy will be set up automatically on [N] Android devices. Swif uses it to block domains on the device. Users may see a VPN icon in their status bar. You don't need to do anything.

When you're done, click Apply to [N] devices. Click Back to change your device selection.

In Device Details > Applications > Blocked, each block shows:

Domain and category blocks can be on the same device.

Swif Browser Security isn't installed in that browser, or the user is in a browser without it. See supported browsers. Review shows these devices as Waiting for setup. Click Deploy Extension, or see Deploy Swif Browser Security.

They need the Swif Mobile Security app. Swif Browser Security for Safari on iPhone and iPad also needs it to work. Review shows these devices as Waiting for setup. Install the app, or use the Apple DNS Settings Policy, or the Content & Privacy Restrictions Policy, instead.

Work profiles don't let Swif filter the whole device's web traffic. Use domain blocking on fully managed Android devices.

Each device gets the rules it supports. Review shows which devices are ready, which need something installed, and which aren't supported, so you can fix gaps before saving.

Yes. Click Allow on that category's row, in Device Details > Applications > Blocked.

Use the deployment policies for each platform. See Deploy Swif Browser Security & Agentic Security Organization-Wide.

Only if the user has allowed Swif Browser Security in private windows. Browsers don't run extensions there by default.