...
The following table lists the default actions and precedence for the feeds and Threat Insight in the Default Global Policy:
| Feed Name | Default Action | Default Precedence |
|---|
Base| AntiMalware | Block – No Redirect | 1 |
AntiMalwareMalwareDGA| Domain | Block – No Redirect | 3 |
Ransomware| Malware_DGA | Block – No Redirect | 4 |
SURBL_Multi| Ransomware | Block – No Redirect | 5 |
PublicDOHPublicDOH_IP| Lookalikes | Block – No Redirect | 7 |
| Threat Insight - DGA | Allow – With Log | 8 |
Threat Insight-Data Exfiltration| Suspicious_Domains | Block – No Redirect | 8 |
| AntiMalware_IP | Allow – With Log | 9 |
Threat Insight-Fast FluxThreat Insight-DNS Messenger| DHS_AIS_IP | Allow – With Log | 11 |
| Ext_AntiMalware_IP | Allow – With Log | 12 |
| Ext_Base_AntiMalware | Allow – With Log | 13 |
| Ext_Ransomware | Allow – With Log | 14 |
ExtAntiMalware| Sanctions_IP_Embargoed | Allow – With Log | 15 |
SURBL_Fresh| TOR_Exit_Node_IP | Allow – With Log | 16 |
DHS_AIS_Domain| Threat Insight-Data Exfiltration | Allow – With Log | 17 |
| Threat Insight - DGA | Allow – With Log | 18 |
| Threat Insight-DNS Messenger | Allow – With Log | 19 |
| Threat Insight-Fast Flux | Allow – With Log | 20 |
| CryptoCurrency | Allow – With Log |
18TORExit_Node| DNSBL_IP | Allow – With Log | 22 |
| NOED | Allow – With Log | 23 |
| FarSightNOD | Allow – With Log | 24 |
| ETQRisk | Allow – With Log | 25 |
| ETQRisk_IP | Allow – With Log | 26 |
| EECN_IP | Allow – No Log |
19 | Blocklist | Block – No Redirect | 20 | 27 |
| Public_DOH | Allow – No Log | 28 |
| Public_DOH_IP | Allow – No Log | 29 |
