Adding Feeds to a Security Policy

The information on this page is intended to assist with the adding of a InfobloxThreat Defense feed to a customer's security policy. The instructions provided on this page cover how to add a feed to a Infoblox security policy. 

Best Practices

Infoblox recommends the following as best practices for customers when removing a feed from a security policy:

• It is recommended that all customers use the AntiMalware, Malware DGA, and Base feeds. Ideally, you are already using these feeds in your security policies. If you are not, enable these feeds prior to removing a feed from your security policy. 

Adding a Feed to a Security Policy

To add a feed to an existing security policy, do the following:

1. Log in to the Infoblox Portal.
2. In the Infoblox Portal, navigate to the Security Policies tab (Configure > Security > Policies).
3. Locate the security policy you wish to add to your feed Click the triple bar icon ☰  associated with the security policy. Then, click Edit.
   
   Image: Click Edit next to the security policy to be added to the feed. 
   
   
4. Click Policy Rules in the left navigation.
   
   Image: Click Policy Rules in the Edit Policy wizard. 
   
   
   
5. Click Add Rule.Then, click Feeds and Threat Insight to display the list of threat feeds.
   
   Image: Click Add rule followed by clicking Feeds and Threat Insight to display the threat feeds list.  
   
   
6. Locate the new entry in the Security Note panel. The new Feed and Threat insight entry will be at the bottom of the Policy Rules list.
   
   Image: Locating the entry in the Security Note panel.
   
   
7. Click Choose a Feeds and Threat Insight. Select the feed  to be added to the security policy. Once the new feed is selected, click Select to confirm the selection of the feed.
   
   Image: Selecting the desired feed for adding to the securty policy. 
   
   
   
8. Use the Up and Down arrows on the far right of the newly added policy rule to change the order of precedence for the newly added feed.
   
   Image: Click the Up and Down arrows to change the newly added feed's precedence order.
   
   
   
9. Change the Action that is associated with the newly added policy rule. 
   
   Image: Selecting the Action to be associated with the newly added policy rule. 
   
   
10. Click Finish to add the feed to your security policy configuration
11. Click Save & Close to save the newly updated security policy configuration.