This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Privacy Policy. Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
ABOUT CHECKMATES CYBER SECURITY COMMUNITY & FAQ
Create a Post
Help
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

Are you a member of CheckMates?

×
Sign in with your Check Point UserCenter/PartnerMap account to access more great content and get a chance to win some Apple AirPods! If you don't have an account, create one now for free!
Adir_Sabag
Explorer
‎2023-09-03 03:47 AM

Checkpoint FW management CLI IOC feeds

Hi,

We are an MSSP SOC, and one of our customers has a Check Point FW. They also have a MISP server, and we want to integrate between them, and feed the FW with IOC from MISP.

What would be the best way to do it? Is there a built in feature to set a MISP IOC feed at the management FW CLI?

If not, can we export the IOCs from MISP to a csv (or other file format) and feed the FW via CLI with a custom script?

Any help appreciated,

Thank you.

0 Kudos
1 Reply
Danny
Champion Champion
Champion
‎2023-09-03 05:00 AM

I recommend to update your firewall to R81.20 first.
Then define your IoC Feed Urls in SmartConsole as described here.

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

View All ≫
Upcoming Events

    CheckMates Events