Prevent Law features for UK organisations - Console

Updated 3 hours ago by admin

In the UK, the Prevent Law or Prevent Duty, is a duty that certain UK organisations (e.g. schools, government, etc) have to prevent people being drawn into terrorism.

To support this, the Web Security product includes a block list of known online terrorist and radicalisation content that is supplied and maintained by the Counter Terrorism Internet Referral Unit (CTIRU). If this option is enabled, requests to websites on this list will be blocked and attempts to access these sites can be viewed in Analytics ⟶ Web Activity.

End-users will receive a "Page not found" message if they intentionally or accidentally visit a CTIRU-listed web site.

How to verify if the CTIRU blocklist is enabled

To request the CTIRU blocklist to be enabled or disabled for your account, please contact your service provider.

You can further verify that the CTIRU blocklist is active by visiting http://ctirutest.trustlayer.co.uk in a web browser that is protected by Web Security. If the CTIRU blocklist is active, a 404 Not Found message will be displayed. If it is inactive, the web site domain will not be resolved due to a server error.
For full coverage of the CTIRU blocklist, you must ensure TLS/SSL interception is enabled (for gateways, in the gateway profile's TLS Inspection section).

How to report on access to the CTIRU blocklist

To report on attempts to access content in the CTIRU block list use the Web Activity report.

  1. In the console, go to Analytics and click Web Activity.
  2. Choose a Timespan (Hour, Day, Week, Month or Custom).
  3. Click Filters to expand them.
  4. In the Content group, open the Web Categories drop-down and select the CTIRU category.
  5. Click Apply Filters, then Run Report.
You can also type a request into the AI Query box, for example show me all requests to CTIRU-listed sites in the last week, and click Generate. Check that the generated filters match what you want before running the report.

The results will show any requests which matched CTIRU-listed content. You can narrow down your results further by timespan or by additional filters, in the same way as any report.

To reuse this report, click the ⋮ menu next to Run Report and choose Save Report. Give it a name and tick Add to Favourites to show it under Analytics ⟶ Favourites in the left-hand menu. You can also choose Download from the same menu to export the results.

Scheduling a daily CTIRU alert

You can have the CTIRU report emailed to you automatically, so you hear about matches without running it yourself.

  1. Save the CTIRU report as described above, with the Day timespan selected.
  2. Under Analytics in the left-hand menu, click Scheduler, then click New Schedule.
  3. Choose Daily and set the Start date and Start time.
  4. Under Saved report, select your CTIRU report. Only reports covering the last hour or day are shown for daily schedules.
  5. Add the Recipients and choose CSV or Excel. Leave Send even when there are no results unticked, so an email is only sent when there is a match.
  6. Check the summary, then click Create schedule.
See Schedules for more on managing scheduled reports.

How did we do?