Block or allow? What really happens when the same URL is in both lists?Solved

Great question, @liam_t ! This happens more often than you’d think. 

In Hexnode, when the same URL exists in both the allowlist and blocklist, the system follows a priority logic: 

Blocklist always takes precedence over Allowlist. 

So, if example.com is in both lists, the device will block access to example.com 

Even though it’s technically also in the allowlist. This is by design to make sure security policies are never accidentally bypassed. 

Best Regards,  
Isabel Lora 
Hexnode UEM 

So basically, the blocklist is the “final authority”?

Even if I’m trying to allow something for a special case?

Exactly @ace_98 . Think of it like this:

• Allowlist = “You may access this.”
• Blocklist = “You must not access this.”

When there’s a conflict, Hexnode always chooses the stricter rule, the block.

If you want to allow a site:

• Make sure it is not present in any active blocklist.
• Also, check if the device is getting rules from more than one policy. Even if you fix one policy, another one might still be blocking it.

Best Regards,
Isabel Lora
Hexnode UEM

Ah, that explains why my test device couldn’t open a site I just allowed.

It was still blocked by another policy.

Yep! This is a classic case of overlapping policies.

Best practice:

• Avoid adding the same site to both lists.
• Regularly review your allowlists and blocklists.
• Try to manage website access rules in just one main policy.
  Too many policies = more confusion and more mistakes.

Best Regards,
Isabel Lora
Hexnode UEM

Got it. So, the rule of thumb:

If something is blocked and allowed at the same time, expect it to be blocked.