Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
FM
Contributor
Jump to solution

How to whitelist a URL for all the threat prevention blades

Hello,

I would like to know how to whitelist 1 or more external URLs on all the threat prevention blades. The URLs are used for security tests such as phishing campaigns and threat simulations.

 

Thanks

Faisal

0 Kudos
1 Solution

Accepted Solutions
PhoneBoy
Admin
Admin

Create an Application with said URLs in them:

Screen Shot 2020-01-23 at 9.08.39 AM.png

Then create a Global Exception rule:

Screen Shot 2020-01-23 at 9.07.25 AM.png

Push Threat Prevention policy.

View solution in original post

4 Replies
PhoneBoy
Admin
Admin

Create an Application with said URLs in them:

Screen Shot 2020-01-23 at 9.08.39 AM.png

Then create a Global Exception rule:

Screen Shot 2020-01-23 at 9.07.25 AM.png

Push Threat Prevention policy.

bcsw222
Explorer

I've been trying to get confirmation on something related to custom Application/Sites and applying them to Threat Prevention.

 

I want to exclude www.mycompany.com and all of its subdirectories. eg: www.mycompany.com/example/example2/example3

 

How would the URL need to be entered? Would simply adding www.mycompany.com with regex unchecked accomplish this?

 

In this particular case I don't need to exclude any additional subdomains - just www.mycompany.com and all of it's subdirectories.

 

I've looked through this forum and I can't seem to find an answer to this.

0 Kudos
PhoneBoy
Admin
Admin

Do it as shown in my screenshot.
What you’re asking for is exactly how it works.

0 Kudos
bcsw222
Explorer

Thank you very much! I didn't have any luck locating Check Point documentation confirming how non-regex URLs treat subdirectories.

 

I have an additional question regarding the URL creation. Would adding example.com to the URL list also cover www.example.com?

 

I know example.com would not cover say subdomain1.example.com, but I came across a Check Point community thread (I can't seem to find it again) that indicated example.com covered the www subdomain in the URL list.

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events