You can add URLs, MD5 or SHA-256 hashes and REGEX URLs to both the allowed and blocked lists on the File Protect appliance Web UI. These lists will enable the File Protect appliance to filter emails for analysis of malicious content.
Note
REGEX URLs are not applicable for File Protect appliances.
.png "NX_allowedBlock1.png")
Emails containing IOCs mentioned in the allowed list will not be analyzed for malicious content and attachments.
See Custom whitelists, blacklists, passwords, and duplicates to whitelist or blacklist URLs, MD5 or SHA-256 hashes via the CLI.
Manage allowed or blocked lists using the File Protect Web UI
Log in to the File Protect appliance as an administrator.
Go to Settings >Allowed List/Blocked List.
Use the Add By button to select the IOC to add.
A maximum of 1200 entries is allowed in both the allowed and blocked lists.
.png "NX_allowedBlock2.png")
Enter the IOC in the pop-up window.
.png "NX_allowedBlock4.png")
You can use the checkboxes in the first column to select and delete single or multiple IOCs.
Under Type column, select the IOCs to sort the list by type of IOC.
.png "NX_allowedBlock3.png")
Click the Edit symbol in the last column to edit an IOC.