Create CIPA policy
- Go to Gateway > Firewall policies.
 - Create a policy to block using the CIPA filter: 
Selector Operator Value Action Content categories in CIPA FilterBlock  - In Logs > Gateway > DNS, verify that you see the blocked domain.
 
Your environment is now protected against all of the subcategories listed in Configuration.