I have a blocked site I need to get to
- Open a False Positive ticket by emailing Support@Threatstop.com
- If you need it unblocked soon, go to "Add custom allow/block list to policy" down below
I have an IP/Domain I want to block that's not in a target/bundle
- See below!
Add custom allow/block list to policy
To add a custom IP or Domain to your User Defined List go to User Defined Lists > Choose IP or DNS > Choose or make a list (Allow or Block based on what you want to do) >
Check you're on the right type of list (don't change if you're editing!) > Go to Add One/Many > Input your desired IPs or Domains > Click Add > Save User List
--It is recommended to add comments to save time later when someone (or you) need to remember why something was allowed or blocked! In case you need to consider removing it or have an audit.
In your policy to add the User Defined List, go to Policies > Edit Policy > User Defined Lists > Select your UDL > Choose Allow/Block to match the list! > Add list > Save > Ensure that the UDL is in your policy
Done! As soon as your device pulls its policy from Threatstop your custom IPs/Domains should be added.
Help! I can't see my UDL in the policy editor!
- Is it the right kind of UDL for the policy? IP/DNS.
- Is it showing under your UDLs from the first screenshot page?
- Make sure you're hitting save!
Comments