Previous Next JavaScript must be enabled to correctly display this content

## 3.4.6 Defining Excluded Domains for Regions and Web Services

Define a list of restricted domains for regions of type URL and Web services. If a Web service or region of type URL contains an excluded domain, an error displays informing the user that it is restricted.

To define a list of excluded domain from regions of type URL and Web services:

1. Sign in to APEX Administration Services.
2. Click Manage Instance.
3. Under Instance Settings, click Security.
4. Find Region and Web Service Excluded Domains.
5. In Domain Must Not Contain, enter domains (not including the port), separated by colons, that should not be allowed in regions of type URL or accessed as a Web service. For example:
   `example1.com:example2.com:example3.com`
6. Click Apply Changes.

Parent topic: Configuring Security