In the Web Console, you can manage Web Threat Protection settings in the policy properties (Application settings → Communication & Web Protection → Web Threat Protection).