Adding Exception Source have multiple IP

[Vishnu_prasath]

Hi,

I am Facing issue mail blocking checkpoint firewall under the Anti-virus blade. we have tried to adding exception manually and automatically using log but not effective. later we find source domain multiple IP's

[PhoneBoy]

If you're doing based on the logs, you're probably doing an IP-based exception.

To a do a proper exception for all emails from a given domain, various DNS records would have to be interrogated to understand what IPs are acceptable to send email AS a given domain. 
The product does not do this, to the best of my knowledge.

You should be able to create manual exceptions for the FDQNs for the relevant domain's MX entries. 
These could be done as FQDN Domain Objects.
For example, if you wanted to create an exception for phoneboy.me for email, you'd create two domain objects:

• One for mx01.mail.icloud.com
• One for mx02.mail.icloud.com

The gateway will resolve these names to the relevant IPs.
It may not catch all exclusions, but it's a good start.