Show when a domain is apart of multiple AppAware Apps
C
Chris Cranie
Show when a domain is apart of multiple AppAware Apps. An example of this is some Twilio domains show up under SendGrid. So if you're blocking SendGrid, it will show the reason a domain was blocked for some domains was due to AppAware and it will show the Twilio app, instead of the SendGrid app. This causes issues when trying to troubleshoot why something is being blocked and having to do a lot of "shots in the dark" instead.
Created by Brian Gilstrap
Minetta Gould
Thanks again for the detailed report, Chris Cranie — we dug into this with Engineering and have some findings:
We found an edge-case issue in the query processor logic where, when a domain belongs to multiple AppAware categories, the processor can incorrectly prioritize an allowed category and surface the “wrong” AppAware app as the block reason. We haven’t seen it often because true AppAware overlaps are pretty rare, but your example is a great catch.
Our Platform team has the details and is looking into the best way to update the logic. In the meantime, if you run into this again, the quickest way to confirm what’s happening is to run the domain through the
Domain Report
tool—it will show all categories the domain belongs to and exactly where/how it’s being blocked in your policies.Minetta Gould
Hi Chris Cranie, thanks for this post!
What you’re describing isn’t the expected behavior. The
Domain Report
tool should surface all applicable categories, and the Query Log
should clearly show the correct block reason—in this case, SendGrid being blocked via AppAware—rather than attributing it to a different app like the domain is also categorized under, Twilio.I’ve shared this with our Engineering team so they can take a closer look and confirm whether there’s a bug or edge case causing the mismatch you’re seeing. I’ll follow up here once we have more details!