Create CIPA policy

1. Go to Traffic policies > Firewall policies.

2. Create a policy to block using the CIPA filter:

   Selector	Operator	Value	Action
   Content Categories	in	CIPA Filter	Block

3. In Logs > Gateway > DNS, verify that you see the blocked domain.

Your environment is now protected against all of the subcategories listed in Configuration.