[Feature Request] 'whitelist dst' to add

Hello!

I've faced with FP (?) on potential periodic beaconing (suspicious) heur detection:

Shodan, VirusTotal show, that IP is related to openSUSE Linux infra: https://www.shodan.io/host/195.135.223.50

As one can see 195.135.223.50 is the destination.

But customer doesn't have a possibility to whitelist the destination address: