Create or edit Reputation filter exceptions

Procedure

1. Select Profiles → Inspection Profiles → [Profile Name] → Reputation/Geo.
2. Click the tab for the reputation filter exceptions (IP, Domain, or URL) that you want to configure.

   Note IP and Domain blocking rules supersede URL blocking rules. So, for example, if you already set up a Domain rule to block www.mywebsite.com, a URL exception rule for www.mywebsite.com/exception would not be enforced because the DNS request occurs before the HTTP request. Even if the URL rule belongs to a higher-prioritized filter than the Domain rule, you would have to disable the Domain rule first for this URL exception to succeed. A flow that is permitted by an IP rule, however, can still be blocked by a Domain rule or URL rule. Likewise, a flow that is permitted by both an IP rule and a Domain rule can still be blocked by a URL rule.

3. Click Add or select an existing exception name, and then click Edit.
4. Configure the exception.
   • For IP exceptions:
     • Select Any IP to apply the restriction to all traffic sources.
     • Select IP Address, and provide or select an IP address to apply the restriction to that specific source.
   • For Domain exceptions:
     • Type the name of the domain that you want to exclude from the filter. A wildcard can only be used for the first character in a domain.
   • For URL exceptions:
     • Type the URL that you want to exclude from the filter.

     Note A single wildcard string \* can be used only at the beginning and end of user-defined URL entries and exceptions. For example, each of the following wildcard entries successfully matches URL http://a.com/path/to/resource: Domain wildcard usage: \*/path/to/resource Path wildcard usage: http://a.com/\* Path wildcard usage: http://a.com/path/\* Path wildcard usage: http://a.com/path/to/\* Both domain and path wildcard usage: \*/path/\* Both domain and path wildcard usage: \*/path/to/\*

5. Click OK.