PAN-OS 9.1

Table of Contents

Create Domain Exceptions and Allow | Block Lists (PAN-OS 9.1)

Allow and block lists are not available in PAN-OS 9.1.

Add domain signature exceptions in cases where false-positives occur.

Select

Objects

Security Profiles

Anti-Spyware

Select a profile to modify.

Add

or modify the Anti-Spyware profile from which you want to exclude the threat signature, and select

DNS Signatures > Exceptions

Search for a DNS signature to exclude by entering the name or FQDN.

Select the

DNS Threat ID

for the DNS signature that you want to exclude from enforcement.

Click

to save your new or modified Anti-Spyware profile.