FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Kraven2323
Staff
Staff
Article Id 210402
Description

This article describe that FortiOS version V6.2 onwards the external block list (threat Feed) in firewall policy can be done.

Among one of the category, Domain name threat feed can be configured.

Scope

It is possible to configure the Domain Name threat feed using the following navigation:

Security Fabric -> External Connectors, select 'Create New' -> Threat Feeds -> Domain Name.

 

Kraven2323_0-1650960677588.png

 

The Domain Name contains one domain per line. Simple wildcards are supported.

It is available as a Remote Category in DNS Filter profiles.

 

Example:

 

mail.*.example.com
*-special.example.com
www.*example.com
example.com

 

Kraven2323_1-1650960753017.png

 

The Domain Name threat feed can only be applied to DNS filter profile.

 

Kraven2323_2-1650961655446.png

 

Reference https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/195303/external-resources-for-dns-filter
Contributors