Creating Allowlist for Sky ATP Email and Malware Management
Use the Modify Whitelist page to add email addresses, IP addresses, and URLs to the allowlist. A allowlist contains known trusted IP addresses, URLs, and domains. Content downloaded from locations on the allowlist does not have to be inspected for malware.
Before You Begin
Read the Sky ATP Email Management Overview topic.
Read the Sky ATP Malware Management Overview topic.
Decide on the type of location you intend to define: URL or IP address.
Review the current list of entries to ensure that the item you are adding does not already exist.
To configure the allowlists:
- Select Configure>Threat Prevention> Feed Sources.
The Feed Sources page appears.
- Under the Sky ATP tab, right-click the Sky ATP realm or
from the More list, select Whitelist.
The Modify Whitelist page appears.
- Click the + sign to add more entries to the allowlist.
- Complete the configuration by using the guidelines in Table 1.
- Click OK.
Table 1: Fields on the Modify Whitelist Page
Field | Description |
|---|---|
Email List | |
Email Sender | The allowed email senders are listed here. To add more email senders to the allowlist, click the + sign. Enter the full address in the format name@domain.com or wildcard the name to permit all emails from a specific domain. For example, *@domain.com. |
Malware List | |
IP and URL | Enter an IP address or a URL.
|
To edit an existing allowlist entry, select the allowlist that you want to edit and click the pencil icon.
Sky ATP periodically polls for new and updated content and automatically downloads it to your SRX Series device. There is no need to manually push your allowlist files.