You can enable the C&C blocking feature and add IP address or IP addresses to the Approved List.
To enable C&C blocking:
Register Deep Discovery Inspector or TDA to your Network VirusWall Enforcer device.
Enable Threat Mitigation in Policy Enforcement. Refer to Step 6: Specify Threat Mitigation Rules.
Click Policy Enforcement > Block C&C Connections. The Block List screen appears.
Enable the Block connections to and from C&C servers detected by Deep Discovery Inspector option.
Click Save.
To add critical servers to the Approved List:
Go to Policy Enforcement > Block C&C Connections.
Click the Approved List tab.
Specify the IP address or IP address range. Optionally, add a comment to indicate why this was added to the Approved List.
Click Add to >.
Click Save.