Control traffic based on DNS list or feed

Control network traffic by applying DNS-based filtering rules using predefined or custom DNS lists and threat intelligence feeds.

Use DNS lists and feeds in security policies to block or allow traffic based on domain reputation and threat intelligence data.

Procedure

Step 1	In the DNS rule editor, click DNS.
Step 2	Find and select the DNS lists and feeds you want to add from the DNS Lists and Feeds, as follows: To add a DNS list or feed on the fly, which you can then add to the condition, click Add () above the DNS Lists and Feeds list and proceed as described in Creating Security Intelligence Feeds. To search for DNS lists, feeds, or categories to add, click the Search by name or value prompt above the DNS Lists and Feeds list, then type an object name or the value of one of the object's components. The list updates as you type to display matching objects. For descriptions of the system-provided threat categories, see Security Intelligence Categories.
Step 3	Click Add to Rule, or drag and drop.
Step 4	Save or continue editing the rule.

The DNS lists and feeds are now configured in your rule and will filter traffic based on the selected criteria.