The User-Defined Suspicious Objects screen appears.
The Add Object dialog appears.
IP address: type an IP address or a hyphenated range.
IPv4 and IPv6 addresses and subnet mask bits are supported.
URL: type a URL.
HTTP and HTTPS URLs are supported.
File SHA-1: type the SHA-1 hash value of a file.
Domain: type a domain name.
One wildcard (*) connected with a "." in the domain prefix is supported.
The object appears in the User-Defined Suspicious Objects list. Registered appliances receive the updated User-Defined Suspicious Objects list during the next synchronization.
Objects can also be added from product intelligence. For details, see Copying C&C Callback Addresses to User-Defined Suspicious Objects.