TIDE Custom RPZ is created using up to five organization-uploaded feeds, each containing its own datasets that are combined into one RPZ feed with filtering applied. Your organization can choose which threat classes and properties are filtered in the RPZ feed. Applying all filters to a custom RPZ feed will get all records pulled from the TIDE database; whether or not this option is available depends on your organization’s subscription plan.
NOTE: When a new indicator is added to an RPZ feed, it generally takes a couple hours for the RPZ to reflect the changes. Sometimes it may take longer.
Viewing Custom RPZ Feeds
To view all custom RPZ feeds created by your organization, do the following:
In the Cloud Services Portal, click Manage > TIDE Data.
On the TIDE Data page, click the Custom RPZ tab, located above the top Action bar. The Custom RPZ page shows the following:
NAME: The name given to the feed when it was created.\
DESCRIPTION: The description provided for the feed when it was created.
FEEDS: The number of feeds included in the feed.
...
To add a custom RPZ feed, do the following:
In the Cloud Services Portal, click Manage > TIDE Data.
On the TIDE Data page, click the Custom RPZ tab, located above the Action bar.
On the Custom RPZ page, click Add Custom RPZ in the Action bar.
On the Add Custom RPZ List page, specify the following:
Feed Name: For each custom list, enter a unique name that is from 3 to 48 characters in length and consists of lowercase letters and of “-“ and “_” characters.
Description: Enter a brief description for the feed.
Data Sources: Select one or all of the data types:
Infoblox Curated Data: Data curated and provided by the Infoblox Cyber Intelligence team.
Infoblox 3rd Party Data: Data provided by Infoblox’s third-party provider.
Your Uploaded Data: Data owned and curated by your own organization and uploaded as a custom RPZ feed. For details, see Submitting TIDE Data.
Click Select Class/Property: Do one of the following:
Add one or more classes or properties to your RPZ feed. Or, add all available classes and properties. With Select All, you will add all database records to your custom RPZ feed.
...
To edit an existing custom RPZ feed, do the following:
On the TIDE Data page, click the Custom RPZ tab.
Select the custom RPZ feed to be edited.
Click Edit.
On the AddCustom RPZ Listpage, make edits as desired.
Click Save & Close.
Removing a Custom RPZ Feed
...
To remove a custom RPZ feed, do the following:
On the TIDE Data page, click the Custom RPZ tab, located above the Action bar.
Select the RPZ feed to be edited.
Click Remove in the Action bar.