Removing Feeds from a Security Policy

The information on this page is intended to assist with the removal of a Infoblox Threat Defense feed from a customer's security policy. The instructions provided on this page cover how to remove a feed from a Infoblox security policy. 

Best Practices

Infoblox recommends the following as best practices for customers when removing a feed from a security policy:

• When removing or replacing feeds from a security policy consider your security policy settings, eg., logging vs blocking, that may be impacted by a feed's removal. 
• It is recommended that all customers use the AntiMalware, Malware DGA, and Base feeds. Ideally, you are already using these feeds in your security policies. If you are not, enable these feeds prior to removing a feed from your security policy. 

Removal of a Feed from a Security Policy

To remove a feed from an existing security policy, do the following:

1. Log in to the Infoblox Portal.
2. In the the Infoblox Portal, navigate to the Security Policies tab (Configure > Security > Policies).
3. Locate the security policy you wish to remove the feed Click the triple horizontal bar icon associated with the security policy. Then, click Remove.
   
   Image: Click Remove next to the security policy to remove it from the feed.
   
   
   
4. Click Policy Rules in the left navigation.
   
   Image: Click Policy Rules in the Edit Policy wizard.
   
   
5. Click the checkboxes associated with the feed to be removed. Note: If the feed is not visible in the list, then it has not been added to the policy and does not need to be removed. 
   
   Image: Selecting the feed or feeds to be removed by checking the box next to the feed name.  
   
   
6. Click Remove, to remove the feed from the policy. 
7. Click Finish, to save the updated configuration with the feed removed.