The blacklist policy does not apply

[earomero]

Good morning from Argentina, I hope you are well.
I have a policy that blocks some URLs, however, in Malicious Traffic my endpoints connect to that site.
What do you think is wrong?
Thank you very much, greetings!

[PhoneBoy]

How are you verifying the endpoints are actually connecting to that site?
To me, it looks like a DNS query occurred, which might happen even if the actual connection was blocked.
However; it’s not clear what you have provided a screenshot of.

More details are needed, including client versions, precise configurations, and more detailed logs.

[lluner · Accepted solution]

hi

Do like the screens

[earomero]

Buenas! muchas gracias! saludos desde Argentina!

[the_rock]

Saludos from Canada 🙂

[the_rock · Accepted solution]

You do it exactly how @lluner advised. Just select right rule, click on advanced on bottom right and then you will see block list option there and you can add sites as desired.

Andy