Related Topics
Botnet Site Exceptions
You can create exceptions to the Botnet Detection sites list. These entries are configured and processed as Blocked Site Exceptions. When you add a site to the exceptions list, traffic from that site is not blocked, even if it is included in the Blocked Sites list as a result of the Botnet Detection feature. Traffic from sites on the exceptions list is also not automatically blocked by features such as Default Threat Protection, and by block actions configured in a proxy policy. For more information, see Create Blocked Sites Exceptions.
You can add an exception for:
- IP address
- Network IP address range
- Host IP address range
- Host name (one time DNS lookup)
- FQDN (includes wildcard domains).
For more information about how to use FQDN in exemptions and policies, see About Policies by Domain Name (FQDN).
- Select Subscription Services > Botnet Detection.
The Botnet Detection page appears.
Botnet Site Exceptions in Fireware Web UI
- To add an exception, click Add.
- From the Choose Type drop-down list, select a method to identify the botnet site exception.
- In the adjacent text box, type the address for the type you selected:
If the exception is for a host range, type the start and end IP addresses for the range of IP addresses in the exception.
For FQDN, you can use a specific domain name, such as example.com, or use a wildcard to indicate the domain and all subdomains, such as *.example.com. - (Optional) In the Description text box, type a description of the botnet site exception.
- Click OK.
- Click Save.
- Select Subscription Services > Botnet Detection.
The Botnet Detection dialog box appears.
Botnet Site Exceptions in Policy Manager
- Click Add to add an exception.
- From the Choose Type drop-down list, select a method to identify the botnet site exception.
- In the adjacent text box, type the address for the type you selected.
If the exception is for a host range, type the start and end IP addresses for the range of IP addresses in the exception.
For FQDN, you can use a specific domain name, such as example.com, or use a wildcard to indicate the domain and all subdomains, such as *.example.com. - (Optional) In the Description text box, type a description of the botnet site exception.
- Click OK.
- Save the configuration to the Firebox.