Anti-Bot Resource classification mode set hold mode but still pass

[Webplus-Alan]

Dear ,

Resource classification mode set hold mode,But I observed that C&C will still PASS.

Why is it like this?

[PhoneBoy · Accepted solution]

Hold applies to HTTP/HTTPS traffic.
DNS can’t be “held” since it’s a single packet, usually.
The way to handle this with DNS is to use the DNS Trap feature.
See: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut... 

[Webplus-Alan]

i found this sk

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

the defualt dns is set bg

TKS PhoneBoy