cancel
Showing results for 
Search instead for 
Did you mean: 
vizer
Level 8

Global block (external IP)

Jump to solution

Hi All,

How to block external IP to McAfee? such as 92.53.96.10.

What criteria to choose?

I wanted to choose the criterion "URL - matches - Regex (.*92.53.96.10.*)

But this rule is blocking too much.

Regards,

Sergey

0 Kudos
1 Solution

Accepted Solutions
McAfee Employee

Re: Global block (external IP)

Jump to solution

Sergey,

please try "Property URL.Destination.IP equals 92.53.96.10" in combination with "URL.Host equals 92.53.96.10"

when you still have samples where it still not work or hit when it shouldnt you will need to create rule engine trace and check why.

-Sergej

0 Kudos
3 Replies
McAfee Employee

Re: Global block (external IP)

Jump to solution

Sergey,

please try "Property URL.Destination.IP equals 92.53.96.10" in combination with "URL.Host equals 92.53.96.10"

when you still have samples where it still not work or hit when it shouldnt you will need to create rule engine trace and check why.

-Sergej

0 Kudos
vizer
Level 8

Re: Global block (external IP)

Jump to solution

Sergej,

Thank you!

Property URL.Destination.IP equals 92.53.96.10 works

Regards,

Sergey

0 Kudos
McAfee Employee

Re: Global block (external IP)

Jump to solution

sounds good. Please keep in mind to mark this thread as answered to highlight other customers which might have the same issue or looking for a solution.

-Sergej

0 Kudos