# Malicious URL Protection

The Malicious URL Protection feature enables the device to monitor each incoming HTTP packet and detects any URL that matches any of several user-defined patterns. The device automatically drops any such packet.

Warning: Please note that this feature is CPU intensive and under certain high traffic volume conditions can cause high CPU utilization.

### To Enable Malicious URL Protection

1. In the Zone drop-down list, select the zone in which you want the device to monitor HTTP traffic for the URL string that you define.

2. Enter the required information in the following fields:

ID: Enter an identification name for the malicious URL (limit 8 characters).

Pattern: Enter the malicious URL string (limit 24 characters).

Length: Enter the number of characters that must be present in a URL string—starting from the first character—for a positive match.

3. Click Add to save your entry.

## Malicious URL List

This table lists all the URLs your device is configured to protect your network against, and it contains the following information on each URL:

ID: The identification name of the malicious URL entry.

Pattern: The malicious URL string.

Length: The value for “length” indicates the number of characters in the pattern that must be present in a URL—starting from the first character—for a positive match.

Configure: Click Edit to modify the entry or Remove to delete it.

### To modify a Malicious URL entry

1. Click Edit for the malicious URL entry you want to modify.

The information for the malicious URL appears in the configuration box above the list.

2. Enter the new information, then click Add to save your changes.