https://community.checkpoint.com/t5/General-Topics/Checkpoint-FW-management-CLI-IOC-feeds/m-p/191425#M32088 <P>Hi,</P><P>We are an MSSP SOC, and one of our customers has a Check Point FW. They also have a MISP server, and we want to integrate between them, and feed the FW with IOC from MISP.</P><P>What would be the best way to do it? Is there a built in feature to set a MISP IOC feed at the management FW CLI?</P><P>If not, can we export the IOCs from MISP to a csv (or other file format) and feed the FW via CLI with a custom script?</P><P>Any help appreciated,</P><P>Thank you.</P> Sun, 03 Sep 2023 11:25:53 GMT Adir_Sabag 2023-09-03T11:25:53Z https://community.checkpoint.com/t5/General-Topics/Checkpoint-FW-management-CLI-IOC-feeds/m-p/191425#M32088 <P>Hi,</P><P>We are an MSSP SOC, and one of our customers has a Check Point FW. They also have a MISP server, and we want to integrate between them, and feed the FW with IOC from MISP.</P><P>What would be the best way to do it? Is there a built in feature to set a MISP IOC feed at the management FW CLI?</P><P>If not, can we export the IOCs from MISP to a csv (or other file format) and feed the FW via CLI with a custom script?</P><P>Any help appreciated,</P><P>Thank you.</P> Sun, 03 Sep 2023 11:25:53 GMT https://community.checkpoint.com/t5/General-Topics/Checkpoint-FW-management-CLI-IOC-feeds/m-p/191425#M32088 Adir_Sabag 2023-09-03T11:25:53Z https://community.checkpoint.com/t5/General-Topics/Checkpoint-FW-management-CLI-IOC-feeds/m-p/191428#M32089 <P>I recommend to update your firewall to R81.20 first.<BR />Then define your IoC Feed Urls in SmartConsole as <A href="https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_ThreatPrevention_AdminGuide/Content/Topics-TPG/Importing-External-Custom-Intelligence-Feeds-in-SmartConsole_Custom.htm" target="_self">described here</A>.</P> Sun, 03 Sep 2023 12:00:02 GMT https://community.checkpoint.com/t5/General-Topics/Checkpoint-FW-management-CLI-IOC-feeds/m-p/191428#M32089 Danny 2023-09-03T12:00:02Z