Does anyone know if there is any difference between validating the IOC feed entries between R81.10 and R81.20?
On our R81.10 locations, we would cat the following files and it would output all of the observables.
Name of example feed "Test_Block_IP"
- cat /opt/CPsuite-R81.10/fw1/external_ioc/Test_Block_IP/Test_Block_IP_https_custom.csv
In R81.20, the same csv file is present but blank. (Only change being the "CPsuite-R81.20" directory).
- cat /opt/CPsuite-R81.20/fw1/external_ioc/Test_Block_IP/Test_Block_IP_https_custom.csv
In both cases, the Smartconsole logs show success with "External IOC - Fetch succeeded" messages.
What is the user experience for R81.20 users? Are yours blank or there are just another location to see these now?
Thanks in advance:)