For the firewall to use the custom Botnet list, you must enable it as described in Configuring Botnet Filters.
To create a custom Botnet list
Select an IP address object or create a new address object from the A Botnet IP Address list:
An address object cannot overlap any other address objects in the custom country list. Different address objects, however, can have the same country ID.
All other types are disallowed types and cannot be added to the custom Botnet list.
Create new address group… – the Add Address Object Group dialog displays.
You create a new address object as described in SonicWallSonicOS7.0 Policies