You can set a default violation action - either Deny or Allow & Log. The action that occurs depends on whether a match is found with an existing policy.

• If a policy match is not found, Secure Cloud Access applies the default violation action using a policy called TenantDefaultAction. For example, if the default violation action is set to Deny, and no policy match is found, Secure Cloud Access applies a Deny action.
• If a policy match is found, Secure Cloud Access applies the action from that policy, regardless of which default violation action is set. For example, if the default violation action is set to Deny, and Secure Cloud Access finds a matched policy with an action of Allow & Log for a specific user, Secure Cloud Access applies the Allow & Log action for that user.
  1. Select Administration > System Settings > Advanced Configuration and click the Proxy Settings tab.
  2. From the Default Violation Action prompt, select either Deny or Allow & Log, and click Save.