Use Domain EDL for purposes other than DNS sinkholing?

[RISI]

 Can you use a domain EDL for other purposes or only for DNS sinkholing?

In other words, can you use a domain EDL in any policy rule in the same way an FQDN object can be used?

I would expect that you can, but wanted to ask.

[vsys_remo · Accepted solution]

Hi @RISI

The only purpose of Domain EDLs is really the DNS sinkhole feature what means you cannot use these for FQDN objects or else.

[RISI]

Another reason I ask is because the documentation makes it sound like DNS sinkholing is the only thing to use a domain EDL for.

[vsys_remo · Accepted solution]

Hi @RISI

The only purpose of Domain EDLs is really the DNS sinkhole feature what means you cannot use these for FQDN objects or else.

[RISI]

Well that is unfortunate.  Thanks.

[vsys_remo]

Depending on the entrycount of the domakn EDLs this could result in quite a few DNS requests that the firewall needs to resolve. But I see your point. You could contact your local sales to create a feature request for this. If you do, post the FR ID here so others can also vote for this feature.