Autonomous Policy and DNS Malware Trap

[Trevor_Bruss]

If using the Autonomous Policy is there still a way to configure the use of the DNS Malware Trap?

Also, what benefit do I get from using the Autonomous Policy over just selecting one of the pre-designed Custom Policies? Aren't they using the same settings? I've been using Custom policies for quite some time, and I never have touched the settings after we set it up, so how is that any different than say choosing the Perimeter policy on the Autonomous side?

Just trying to determine the benefits as I don't normally tweak anything and just go with the optimized versions Checkpoint has setup.

[Chris_Atkinson]

Have you reviewed the use cases & advantages outlined in sk163593 / sk169952?

[Trevor_Bruss]

Yes, but those really don't answer my question especially when it comes to the DNS Malware Trap.

I guess I'll keep going with using my Custom policy as it seems to do everything that the Autonomous does and I don't see any added benefit in my case. I'm already hands-off with my configuration. Thanks!