https://live.paloaltonetworks.com/t5/general-topics/sinkhole-clarification/m-p/76295#M42251 <P>Disreagard fixed it</P> Wed, 13 Apr 2016 01:52:06 GMT clyde.franklin 2016-04-13T01:52:06Z https://live.paloaltonetworks.com/t5/general-topics/sinkhole-clarification/m-p/76286#M42246 <P>I have VWIRE setup&nbsp; rule is trust to untust (wide open rule to any) I added sinkhole profile to the&nbsp; rule. I also added a&nbsp; deny rule above for my sinkhole ip (53.53.53.53). I have my windows box&nbsp; pointing to&nbsp; .2.2.2 when I do nslookup on suspcisous site I never see it hit the sinkole policy nor does the 53.53.53.53 ip show up in threat or traffic logs. Can someone provide input why this happening? I have followed intrustions per document.</P> Tue, 12 Apr 2016 20:22:12 GMT https://live.paloaltonetworks.com/t5/general-topics/sinkhole-clarification/m-p/76286#M42246 clyde.franklin 2016-04-12T20:22:12Z https://live.paloaltonetworks.com/t5/general-topics/sinkhole-clarification/m-p/76295#M42251 <P>Disreagard fixed it</P> Wed, 13 Apr 2016 01:52:06 GMT https://live.paloaltonetworks.com/t5/general-topics/sinkhole-clarification/m-p/76295#M42251 clyde.franklin 2016-04-13T01:52:06Z