CP Easy Import Tool

[Josh_Krall]

Hi all,

This is a simple HTML form to easily upload many hosts to a group. This tool makes it easy to copy/paste IPs and import them all via the Command Line API.

[Danny]

As the above is not an official script, here are the officially supported ways to automatically block known malicious IPs:

• sk103154 - How to block traffic coming from known malicious IP addresses
• sk21534 - How to configure and troubleshoot IPS protection "Malicious IPs" (DShield Storm Center)
• sk67861 - Accelerated Drop Rules Feature (sim dropcfg)

To drop IPs by geo location, use IPS Geo Protection (also for AWS/Azure cloud) and check this CPX360 presentation.

Other, non-official resources can be found here: CP Dynamic Block Lists  and in our Code Hub.

[HeikoAnkenbrand]

Under R80.20+ use „fwaccel dos“ on SecureXL layer. It is bettet for the performance of the firewall.

More see here:

R80.x Performance Tuning Tip – DDoS „fw sam“ vs. „fwaccel dos“