topic Re: Import list of blocked IPs / URLs in General Topics

Import list of blocked IPs / URLs

Gro_Tea — Fri, 07 Aug 2020 15:36:17 GMT

Hello,

you probably know the Cryptolaemus group, which publishes daily lists of Emotet downloader links and C2 servers.

Is there a way to import these into Checkpoints Anti-Bot per script?

Thanks,

Frank

Tal_Paz-Fridman — Fri, 07 Aug 2020 19:22:53 GMT

What about using some like Threat Indicators. In SmartConsole > Security Policies > Threat Prevention > Threat Tools > Indicators:

masher — Mon, 10 Aug 2020 15:02:14 GMT

Custom Threat Intelligence feeds might be of use here.