This section describes the external dynamic malicious URL
list.
In addition to querying predefined categories, configuring the
blacklist, whitelist, and user-defined URL categories, enabling malicious
URL detection and low-reputation detection, the
FW can filter URLs based on the external dynamic malicious URL list.
The external dynamic malicious URL list is a text file of malicious
URLs released by external official websites. By updating the external
malicious URL signature database, the
FW downloads the latest external dynamic malicious URL list from the
external official websites and loads it to its cache. When the
FW is enabled with filtering of external dynamic malicious URLs, the
FW matches the requested URL with the external dynamic malicious URL
list in the cache. If the URL matches the list, the
FW blocks the URL request. In addition, a web push page that is the
same as that in the blacklist is displayed on the browser of the requester.
The
pushing information can be edited on the
FW. To enable the
FW to identify and block the latest malicious URLs in a timely manner,
the
FW needs to update the external malicious URL signature database
from the external official websites to update malicious URLs in its
cache. With this function, you can update the malicious URL list based
on your requirements. When the malicious URLs are not updated in a
timely manner, the malicious URLs cannot be blocked in a timely manner.
In this case, you can load an external dynamic malicious URL list
so that the
FW can identify and block the latest malicious URLs, defending against
new attacks.
If the number of URLs in the external
dynamic malicious URL list exceeds the maximum value of the FW, the excess URLs will fail to be loaded.