KB Article | Forcepoint Support

Problem Description

The Ransomware Payment Site IP Address List element in Forcepoint NGFW becomes obsolete in dynamic update package 1234. This change takes effect when you install the dynamic update package.


As a replacement, the following new IP Address List elements have been introduced in dynamic update package 1223:

  • Botnet IP Address List
  • Malicious Site IP Address List

To start using the new IP Address List elements, install the dynamic update package. These IP Address List elements are updated every time a dynamic update package is released.

Note: To make sure that business-critical traffic is not disrupted, we recommend that you allow and log traffic that matches these IP Address List elements until you are sure that your rules match only the intended traffic.

Article Feedback

Thank you for the feedback and comments.