Pharming protection exception rule

Question

Dear All, 
 We know Enable pharming protection can protect the wrong certificate of SSL sites. 
 But we need to redirect some FQDN to specify IP addresses for testing, 
 and this will be blocked by XG pharming protection. 
 Is there a way to set the exception FQDN on XG? 
 I have been tested the Web Protection Exceptions, and it doesn't work... 
 Thanks~ 
 Shunze

lferrara · Accepted Answer

Shunze, 
 pharming protection is a global secuirty term and not related to Sophos. Pharming protection is used in order to double check DNS requests from computers, so if the computer is infected by a malware that changed the hosts file (www.gooogle.com --> 1.2.3.4, which is wrong) XG in this case will re-check the request and compare the IP to its DNS servers and the IP received from the client. If they match, traffic is allowed! 
 Anyway an exception is needed because I saw another thread few months ago where people in VPN where not able to reach their internal Email server because of Pharming protection. 
 Open a feature request on ideas.sophos.com and we will vote it. 
 Regards