Exceptions in a Multi-Domain Environment

In a Multi-Domain environment, there are 2 types of Global Exceptions:

  • Global exceptions for the Global Domain

  • Global Exceptions for each Local Domain

A Global Exception group for Threat Prevention is created automatically on the Global Domain and on each local Domain. You cannot delete these exception groups. The Global Exception group is empty by default and you can create exceptions manually for it. If you need additional Global Exception groups, you can create them manually.

In the Domain Rule BaseClosed All rules configured in a given Security Policy. Synonym: Rulebase. for Threat Prevention, the Global Exceptions for the Global Domain appear under the Global rules, and the Global exception for the local Domain appear under the local rules.