> Source: [sk182142](https://support.checkpoint.com/results/sk/sk182142)

# sk182142 - Domain Threat Indicator is not enforced

| Property | Value |
|----------|-------|
| Solution ID | sk182142 |
| Date Created | 2024-03-26 |
| Last Modified | 2024-04-02 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R81.10 (EOS) |

## Symptoms

- * The Domain Threat Indicator, which represents a malicious activity in an operation cyber domain, is not enforced.

* The website is not blocked.

* When you try to go to the domain, there are no Anti-Bot or Anti-Virus logs.

* Kernel debug (fw ctl debug -m MALWARE + all) shows an indicator is not matched:

      
      @;262588936; 8Feb2024  6:56:04.401750;[cpu_0];[fw4_1];1:{policy}  : malware_res_rep_exec_pm: _params->user_attribs: 3, profile perf impact 3;
      
      @;262588936; 8Feb2024  6:56:04.401753;[cpu_0];[fw4_1];1:{policy}  : malware_res_rep_classify_ex: indicator_match 0, action NONE;

## Cause

In the file `/opt/CPsuite-R81.10/fw1/conf/urlrep.eng`, this line is missing:

`$include ../amw/ext_ioc/cur/rep/urlrep_ioc.eng`

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content