Adding Feeds to a Security Policy

The information on this page is intended to assist with the adding of a BloxOne Threat Defense feed to a customer's security policy. The instructions provided on this page cover how to add a feed to a BloxOne security policy. 

Best Practices

Infoblox recommends the following as best practices for customers when removing a feed from a security policy:

• It is recommended that all customers use the AntiMalware, Malware DGA, and Base feeds. Ideally, you are already using these feeds in your security policies. If you are not, enable these feeds prior to removing a feed from your security policy. 

Adding a Feed to a Security Policy

To add a feed to an existing security policy, do the following:

1. Log in to the Cloud Services Portal.
2. In the Cloud Services Portal, navigate to the Security Policies tab (Policies > Security Policies).
3. Locate the security policy you wish to add to your feed Click the triple bar icon ☰  associated with the security policy. Then, click Edit.
   
   
   
4. Click Policy Rules in the left navigation.
   
   
   
5. Click Add Rule. Then, click Feeds and Threat Insight to display the list of threat feeds.
   
   
   
6. Locate the new entry in the Security Note panel. The new Feed and Threat insight entry will be at the bottom of the Policy Rules list.
   
   
   
7. Click Choose a Feeds and Threat Insight.Select the feed  to be added to the security policy. Once the new feed is selected, click Select to confirm the selection of the feed.
   
   
   
8. Use the Up and Down arrows on the far right of the newly added policy rule to change the order of precedence for the newly added feed.
   
   
   
9. Change the Action that is associated with the newly added policy rule. 
   
   
   
10. Click Finish to add the feed to your security policy configuration
11. Click Save & Close to save the newly updated security policy configuration.