Skip to main content

Problem

Security teams need predictable control over app and web usage to reduce policy bypass and data-risk exposure.

Benefits

You can enforce policy decisions consistently with SafeSquid while preserving legitimate business workflows.

Advantages

You keep actionable policy control close to operations, with verifiable outcomes in logs and policy behavior.

Call to action

Use the steps in this guide to implement the control, then validate behavior with a real user-flow test.

Block advertisements and banners

Ads create security risk, waste bandwidth, and hurt user experience

Ad networks can deliver malware, tracking, and unwanted scripts; ads also increase load time and bandwidth use. Blocking ads at the gateway reduces exposure to ad-based threats, improves performance, and supports acceptable-use policy. SafeSquid BLOCK ADVERTISEMENT policy replaces ad content with a configurable template so users see cleaner pages without client-side ad blockers.

Key benefits

Reduces malware and tracking exposure from ad networks. Lowers bandwidth and CPU use. Cleaner pages with fewer distractions. Evidence for auditors: policy is visible in ConfigureAccess Profiles (or Templates); access logs show traffic that matched the policy. Limitation: Some sites may break if they depend on specific ad endpoints; use bypass or allow rules for exceptions.

Prerequisites

SafeSquid-side: HTTPS Inspection enabled so SafeSquid can inspect and modify HTTPS content. See Configure HTTPS Inspection if not yet enabled. Admin access to the Configuration Portal. Client-side: No change required; blocking is transparent.

Enable BLOCK ADVERTISEMENT policy

  1. Access the SafeSquid interface via the Configuration Portal — web interface for policy and system settings. In the interface header, click Configure to open the configuration menu.
Configuration Portal header with Configure menu highlighted
  1. In Access Profiles (or Templates), use the search box to find the default policy; search for BLOCK ADVERTISEMENT.
Search box in Access Profiles or Templates list Search for BLOCK ADVERTISEMENT default policy
  1. Open the policy: click Edit on the BLOCK ADVERTISEMENT row to open the policy editor. Set Enabled to TRUE, then click Save (or the equivalent save control in the policy section) to save the policy.
Edit button on the BLOCK ADVERTISEMENT policy row Enabled toggle set to TRUE in the policy form Save button to persist the policy changes
  1. Alternatively, enable from Templates in custom settings: open the BLOCK ADVERTISEMENT template, set Enabled to TRUE, and save.
Enable BLOCK ADVERTISEMENT from Templates in custom settings Set Enabled to True in template Save the template

Verification and Evidence

  • Interface: ConfigureAccess Profiles (or Templates) shows BLOCK ADVERTISEMENT with Enabled TRUE.
  • Traffic: Open a site that normally shows ads (e.g. https://www.youtube.com/); ads should be replaced by the SafeSquid template.
Blocked ad replaced by SafeSquid template on YouTube
  • Audit: Access logs and reports show traffic matching the policy; export reports from the Reporting Module for evidence.
:::note Administrators can replace the default template with a custom template. :::

Troubleshooting

Next steps