Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Rafee
Participant

Multi-CMA Shared Object Group - For blocking AbUsers

- Is there an option to create a global object group which can be shared across multiple CMA's for blocking AbUsers as we need to keep adding the IP's on daily basis which takes lot of effort.

- do we have a better way of handling AbUsers across multiple CMA's by reducing the effort of manually adding IP's to each object group across multiple CMA's

Thank you in Advance!

0 Kudos
1 Reply
PhoneBoy
Admin
Admin

You can create global objects at the MDS level and share them.
However, that also means you will need to push policy to all the gateways in all the relevant CMAs upon making any changes.

There are far better ways to accomplish this that require far less effort:

For ioc_feeds, you need to have Anti-Bot or Anti-Virus blade enabled .
For Generic Datacenter and Network Feed objects, the object should be defined per-domain and referenced in the Access Policy.
The gateways will periodically fetch the feed, maintaining a consistent posture across CMAs without the need to push policy or additional configuration changes.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events