Hi @SteveCRF
You can enable this policy URLBlocklist and set the value to '*' to block all URLs then define exceptions in the URLAllowlist policy.
If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Regards,
Yu Zhou