Dynamic ip list block methods comparison

[Emil_T]

To the best of my knowledge, there are 2 main methods to implement Dynamic ip list block

1. Custom Intelligence (IoC) Feeds
2. Network feed

2 questions:

1. What are the differences? (I know that IOC enforced by AB/AV and 2 by Access Policy)
2. Is there a best practice that prefers one method over another?

[PhoneBoy]

IOC Feeds are used for blocking in AV/AB.

Network Feeds can be used in the Access Policy, which means they can be used for more than just blocking IP addresses.