Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Luis1980
Participant

Best Training to Perform Automated Blocks of Malicious IPs

 

Hello everyone. My security group wants to perform more automated blocks when they report malicious IPs, Now we are in the way they send us IPs and block them in the Internet Outbound Firewall cluster. But they want to automate this. I've been reading about SAM rules, but I don't know if it's the best way or if anyone knows about this and can help me. Or if there are other better ways to block IPS. My version is GAIA R80.40.

 

 

Thankss.

0 Kudos
6 Replies
Sorin_Gogean
Advisor

Have a look here, as you are not on R81.

If you were in R81, then I would recommend you to go with Generic DataCenter Objects (SK167210 ),

 

_Val_
Admin
Admin

Generic DataCenter object all the way, which means, you want to upgrade to the recommended version.

_Val_
Admin
Admin

Admin note: moved to the appropriate space.

0 Kudos
the_rock
Legend
Legend

Guys are correct 100%. I would suggest you go to R81.10 if you can, super stable version. Personally, I find mgmt server works really well on R81.20, but would wait for gateway on that version, at least until some jumbo hotfixes come out.

Cheers,

Andy

0 Kudos
Luis1980
Participant

You recommend this to use the datacenter objects.

Would I have to upload the MGMT and all the Firewalls we have?

Thank you.

0 Kudos
the_rock
Legend
Legend

Only mgmt, you can import that anywhere except smart console.

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events