Sky ATP Malware Management Overview
Malware management includes profiles you can create to group file types together for scanning. It also lets you configure customized allowlists and blocklists.
File inspection profiles let you define which files to send to the cloud for inspection. By grouping similar file types together to be scanned (such as .tar, .exe, and .java) under a common name, you can create multiple profiles based on the content you want scanned. Then enter the profile names on eligible SRX Series devices to apply them.
Use the allowlist and blocklist pages to configure custom trusted and untrusted URLs and IPs. Content downloaded from locations on the allowlist is trusted and does not have to be inspected for malware. Hosts cannot download content from locations on the blocklist because those locations are untrusted.