PAN-OS 10.0 and later
- Add domain signature exceptions in cases where false-positives occur.
- Select .
- Select a profile to modify.
- Addor modify the Anti-Spyware profile from which you want to exclude the threat signature, and selectDNS Exceptions.
- Search for a DNS signature to exclude by entering the name or FQDN.
- Select the checkbox for eachThreat IDof the DNS signature that you want to exclude from enforcement.
- ClickOKto save your new or modified Anti-Spyware profile.
- Add an allow list to specify a list of DNS domains / FQDNs to be explicitly allowed.
- Select .
- Select a profile to modify.
- Addor modify the Anti-Spyware profile from which you want to exclude the threat signature, and selectDNS Exceptions.
- ToAdda new FQDN allow list entry, provide the DNS domain or FQDN location and a description.
- ClickOKto save your new or modified Anti-Spyware profile.
