How to whitelist a URL for all the threat prevention blades

[FM]

Hello,

I would like to know how to whitelist 1 or more external URLs on all the threat prevention blades. The URLs are used for security tests such as phishing campaigns and threat simulations.

Thanks

Faisal

[PhoneBoy · Accepted solution]

Create an Application with said URLs in them:

Then create a Global Exception rule:

Push Threat Prevention policy.

[bcsw222]

I've been trying to get confirmation on something related to custom Application/Sites and applying them to Threat Prevention.

I want to exclude www.mycompany.com and all of its subdirectories. eg: www.mycompany.com/example/example2/example3

How would the URL need to be entered? Would simply adding www.mycompany.com with regex unchecked accomplish this?

In this particular case I don't need to exclude any additional subdomains - just www.mycompany.com and all of it's subdirectories.

I've looked through this forum and I can't seem to find an answer to this.

[PhoneBoy]

Do it as shown in my screenshot.
What you’re asking for is exactly how it works.

[bcsw222]

Thank you very much! I didn't have any luck locating Check Point documentation confirming how non-regex URLs treat subdirectories.

I have an additional question regarding the URL creation. Would adding example.com to the URL list also cover www.example.com?

I know example.com would not cover say subdomain1.example.com, but I came across a Check Point community thread (I can't seem to find it again) that indicated example.com covered the www subdomain in the URL list.