Remote FQDN list | feature request
Why it is not possible to add the "Domain Name Threat Feed" to policy as a destination address instead of using DNS filter?
The "IP Address threat feed" working just fine, and I was hoping to be able to add the "Domain Name Threat Feed" also as a destination address in the policy instead of "DNS filter".
Because using the DNS filter in some environments is not an option as the DNS queries is not forwarded through the firewall, but internally.
But when using the "Domain Name Threat Feed" as a destination address , it is more efficient I think. It is like adding a list of FQDNs address group to policy , but managed remotely . The Fortigate pull the list from the remote server , resolve the FQDNs internally , and deny traffic based on its resolution.
Maybe guys you consider this in future releases ...
