Applying IoC IP Addresses File

Applying IoC IP Addresses File can be done in two ways:

1. Global level

2. Access Rule level

To apply IoC IP Address file at Global level

1. Navigate to Policy > Indicator of Compromise > IP Addresses > External Files tab.

2. Add an IoC IP Address file. For more information refer to Configuring IoC IP Addresses File.

3. Click on Settings tab.

4. Enable "Block Connections to/from IoC IP Addresses".

5. Select the file added in Step-2 from the drop-down.

6. Select the "All Connections" radio button.

7. Click on Accept button.

To apply IoC IP Address file at Access Rule level

1. Navigate to Policy > Indicator of Compromise > IP Addresses > External Files tab.

2. Add an IoC IP Address file. For more information refer to Configuring IoC IP Addresses File.

3. Navigate to POLICY | Rules and Policies | Access Rules.

4. Edit an existing access rule.

5. Click on the Security Profiles tab.

6. Enable By IoC OP Addresses toggle.

7. Under mode

   1. Choose Global to include all IoC IP addresses from all configured IoC IP Address Files in the access rule.

   2. Choose Custom and select the file added in Step-2 to include specific IoC IP Address File in the access rule.

8. Click on Save button.