Checking Domain Name Blacklists Fast

Context

Domain name blacklist management plays an important role in border protection. Associating security policies with DNS filtering profiles can effectively prevent internal assets from repeatedly accessing malicious domain names.

Domain name blacklists are mainly delivered in the following situations:

• Huawei Qiankun automatically delivers domain name blacklists after performing an intelligent analysis on threat events.
• Tenants manually create and deliver domain name blacklists on the console.

Domain name blacklists can be in the following states:

• Effective: Domain name blacklists stored on Huawei Qiankun have been successfully delivered to the Qiankun Shield devices, and have taken effect.
• Deploying: Domain name blacklists stored on Huawei Qiankun have not been delivered to the Qiankun Shield devices.
• Failed: The delivery command has been issued but domain name blacklists fail to be delivered.

High-level tenant accounts have the permission to check their own and lower-level tenant accounts' domain name blacklists.

Procedure

1. Log in to the Huawei Qiankun console, and choose > My Services > Border Protection and Response.
2. Click Blacklist and Whitelist in the menu bar.
3. Choose Device IP Blacklist > Domain Name Blacklist, and view domain name blacklists.

Follow-up Procedure

Deleting a domain name blacklist: Select a domain name blacklist and click Delete in the Operation column to delete the domain name blacklist.