CloudConnexa: Blocking Specific Domains or IPs with a Blackhole Network (Workaround)

This article describes a workaround for blocking traffic to specific domains or IP addresses by using a CloudConnexa Network with no online Connectors. Traffic that matches the configured domains or IP addresses is discarded.

You can also apply granular controls per User Group by assigning only the domains or IP services you want blocked.

Important: 

• This approach is a workaround, not a native blocking feature.

• A native solution to support this behavior may be considered in the future.

• Once you assign domains or IP addresses to this Network, they can't be reused in any other CloudConnexa Network as long as the Blackhole Network retains them.

Create a Blackhole Network

Follow these steps to create a Network dedicated to dropping traffic:

1. Create a new CloudConnexa Network in the Cloud Portal, then click Skip Wizard.

2. Enter a descriptive name to clearly differentiate it from other Networks (e.g., Blackhole Network).

3. Leave Internet Access set to Split Tunnel On.

4. Leave the Connector section unchanged. Don't deploy a Connector for this Network.

5. Under Applications or IP Services, add the domains or IP addresses you want to block.

6. Select Add Network to save the configuration.

Apply Granular Controls Per User Group

To block different resources for specific User Groups:

1. Open Access Groups.
2. Create a new rule or edit an existing rule for the User Group.
3. In the Source section, ensure the correct User Group is selected.
4. In the Destination section, add the required Applications or IP Services from the Blackhole Network.

Only resources from the Blackhole Network that you add to the rule are blocked for that User Group. If a resource isn't added, traffic that matches that resource follows standard routing behavior:

• Through the user’s local gateway when Split Tunnel On is enabled, or

• Through a different Connector when Split Tunnel Off is enabled.

Additional Information

If you are new to Access Group rules, review the following articles for configuration guidance:

• CloudConnexa – How to set up an Access Group

• Using Access Group to filter User Group to access certain subnets or IP addresses

• Using Access Group to filter User Group to access certain services of the resources