Automated Blacklisting of Malicious IP addresses on MX250

[Melgrove]

We have a customer who recently suffered from an unsuccessful attack to/through their MX250 from a country that should not be trying to access their network.

I understand that this could have been a hidden address range etc and that it is possible to manually blacklist IP addresses/ranges but is there an automated update of malicious IP addresses that can be sent to the MX, maybe from Talos that provides automatic protection from known malicious ranges?

[PhilipDAth]

You wont be able to get a a block list from an attacker just targeting one customer.  However the content filtering lists are dynamic.

This is the settings I typically use:

Also make sure you have threat protection enabled.

[Melgrove]

Thanks Philip. I will check and ensure that these features are enabled.