Create a Post
Showing results for 
Search instead for 
Did you mean: 

Does Threat-Prevention exception inherit DNS-Trap property of profiles

Jump to solution


The title of this post already expresses my question pretty well.
I have a situation where I must maintain visiblity for the "Reputation Domains" protection of a few specific servers, without it triggering the Malware DNS-Trap for those specific servers only.

I have possible solutions in mind such as creating a copy of the profile, disabling DNS-trap on it, and putting the servers only under this new profile. But those feel like sloppy solutions with too much ugly configuration to be justified.

Which brings me to my question, If I were to create an exception bound to this profile with the action detect. Will the DNS trap still be triggered as it would use the parameters of the profile?
One step further, if I were to include it in a global exception, would it also inherit the action? Because the global exception sort-off appends an exception but to every existing profile, I'd expect the same behaviour as with an exception to a profile specifically.

Thanks in advance for your input.


Running R80.40 on Quantum 15400 appliances


0 Kudos
2 Replies
This widget could not be displayed.