Procedure

1. Click Add to add an object.
   The Add Object window appears.
2. Select an object type:
   • IP address: type the IP address or a hyphenated range.

     Note TippingPoint Advanced Threat Protection Analyzer supports both IPv4 and IPv6 formats.

   • Domain: type a domain name.

     Note Wildcards are only allowed in a prefix, and must be connected with a ". " symbol. Use only one wildcard per domain. For example, *.com will match abc.com or test.com.

   • URL: type the URL.

     Note TippingPoint Advanced Threat Protection Analyzer supports both HTTP and HTTPS. Wildcards are only allowed in a prefix. Wildcards used in the domain part of an URL must be connected with a ". " symbol. Use only one wildcard per URL. For example, http://*.com will match abc.com or test.com. A wildcard can match any part of the URL's URI part. For example, http://abc.com/*abc will match http://abcd.com/test.abc.

   • File: type the SHA-1 hash value of the file.
3. Click Add.

   Note The User-defined Match List supports a maximum of 20,000 objects.