Malware DNS Trap blocking Twitter Links https://t.co

[Noa_Moe]

All links posted on Twitter.com get redirected to a link with https://t.co. Our Threat Prevention blade is seeing this as malicious and is sending the traffic to the Malware DNS Trap set as part of our Threat Prevention Policy. I can't see any way to by pass this for t.co or stop this without turning off the Malware DNS Trap all together. I have verified the links are legit.

Has anyone else seen this behavior or know a way to fix this issue? R80.40 Gateways and R81.10 Firewall Manager. We've had this happen before and was cleared after updates but is back again. I'd like a way to stop this on known good URLs. 

[PhoneBoy]

You can set a global exception for this by creating a Custom Application/Site for https://t.co and putting it in a rule in your Threat Prevention policy.
Beyond that, please report the false positive to TAC.

[Noa_Moe]

We have a ticket with TAC and will try to find a root cause for the issue. Thanks for the tip to bypass it for now.