topic Re: exceptions for IOC feed in General Topics

exceptions for IOC feed

Wolfgang — Mon, 17 Mar 2025 15:18:03 GMT

Following What is the "Custom Intelligence Feeds" feature? you can define exceptions in $FWDIR/conf/ip_whitelist.eng

But how about the syntax, only one IP each line ? Can I define a network range like 192.168.10.0/24 ?

Re: exceptions for IOC feed

the_rock — Mon, 17 Mar 2025 15:33:41 GMT

I never tested it with any customer, but when I tried that in the lab while ago, it did let me add a subnet, never complained, both R81.20 and R82. Policy worked fine after.

Andy

Re: exceptions for IOC feed

Wolfgang — Mon, 17 Mar 2025 19:05:13 GMT

Thanks Andy, but how 192.168.10.0/24 or 192.168.10.0/255.255.255.0 or 192.168.10.0 - 192.168.10.255 ?

Re: exceptions for IOC feed

the_rock — Mon, 17 Mar 2025 19:30:46 GMT

Just /24 or whatever the mask brother 🙂

Andy