topic Re: Can we block sha1 or sha256 hashes using ioc_feeds on R81 or R81.10 in Firewall and Security Management

Can we block sha1 or sha256 hashes using ioc_feeds on R81 or R81.10

Blason_R — Tue, 01 Feb 2022 15:08:00 GMT

Hi Everyone,

I am looking for document or sk which shows that we can block sha1 or sha256 hashes using ioc_feeds command. I guess previously there was a limitation that only MD5 hashes can be blocked but I believe that was removed and sha1/sha356 hashes can be blocked with R81/R81.10

Please confirm?

Re: Can we block sha1 or sha256 hashes using ioc_feeds on R81 or R81.10

Chris_Atkinson — Tue, 01 Feb 2022 15:37:15 GMT

Supported observables types per sk132193

SHA1, (from R80.40)

SHA256, (from R80.40)

Re: Can we block sha1 or sha256 hashes using ioc_feeds on R81 or R81.10

Blason_R — Thu, 03 Feb 2022 07:02:04 GMT

Thanks!