Configuring Deny Lists / Allow Lists

Procedure

1. Configure View to display one of the following Deny List / Allow List entities.
   • Files
   • IP Addresses
   • URLs
   • Domains
   (Optional) For Allow List, choose All.
2. Click Add to open the Add Item to Deny List/Add Item to Allow List screens.
   1. Under Type, choose File, IP Address, URL, or Domain.
   2. Type a value in the appropriate text box.

      List Type	Name Type
      Files	SHA-1
      IP Addresses	IP Address
      URLs	URL
      Domains	Domain

      Note To configure the maximum file size, go to Administration → System Maintenance → Storage Maintenance.

   3. (Deny List only) Set an Action to manage the connection to the new entity.

      List Type	Action
      Files	Monitor
      IP Addresses	Monitor Monitor and reset
      URLs	Monitor Monitor and reset
      Domains	Monitor Monitor and reset

   4. (Optional) Add a comment.
3. To remove one or more Deny List or Allow List entities, click Delete.
   Deleted entities are removed from the database.
4. Enable or disable the status of a Deny List or Allow List entity.
5. To edit Type, IP Address/SHA-1, comments, and Action (Deny List only), click a Deny List or Allow List entity.
6. (Optional: Deny List only) To change the priority of a Deny List Entity, click the icon next to its priority number.
   The priority number indicates the order that a Deny List Entity is matched to detections. Priority numbers are sequential in numerical order. Smaller numbers match first.
7. To query different Deny/Allow List entities, specify an IP Address, SHA-1, Domain, or URL.

   Note To search for a SHA-1 entity, type the exact value. For IP Address, Domain, or URL entities, Deep Discovery Inspector matches partial values.

8. To apply all updates and retain changes, click Reload.

   Note For optimum performance, use the Reload button when updating a Deny List / Allow List.