Flag Risky Domains in Allow Lists
Minetta Gould
Feature Request Summary:
Surface risk indicators when allowed domains are flagged as risky or malicious by DNSFilter's threat intelligence.
Problem:
Domains that were safe when allow listed can become compromised or recategorized over time, with no way to alert admins when an allowed domain conflicts with DNSFilter's threat intelligence.
Who's Affected:
Administrators and security teams managing allow lists across policies.
Impact & Context:
- Whitelisted domains can change: a safe domain today may be malicious tomorrow
- No current mechanism alerts admins to conflicts with live threat categorizations
- Security teams may unknowingly bypass protections, undermining their own policies
Desired Outcome:
- An inline conflict indicator at time of domain addition
- A schedulable report surfacing allowed domains that conflict with or have been recategorized by DNSFilter's threat intelligence