Indicator Files

[Dor_Marcovitch]

hey, 

i have seen it is possible to use indicator files on threat prevention blade.

i want to load on only IP indicator file, which blade i must have enabled to use it?

for example to use sha1 indicator file for files, i must have AV blade enabled on the FW, but for IP i could not find resource for it.

thanks

[Vladimir]

Please read: https://sc1.checkpoint.com/documents/R80.30/SmartConsole_OLH/EN/html_frameset.htm?topic=-_ktjOvSNsVD...

But note that you can only use MD5 as a valid hash source.

[PhoneBoy]

You can specify which blade is required in the IOC file, which can either be Anti-Bot or Anti-Virus.