MX Ingestion of external threat feed

Stealth_Network
Getting noticed

MX Ingestion of external threat feed

Hi,

 

Is there a way to configure the MX to ingest an IP address based threat feed. I know Firepower and other firewalls can do this but don't see any docs here that show how the MX's can do it. 

 

If not I will submit a feature request.

 

Thanks

6 Replies 6
cmr
Kind of a big deal
Kind of a big deal

No, it uses the Cisco feeds.

If my answer solves your problem please click Accept as Solution so others can benefit from it.
Stealth_Network
Getting noticed

Not sure what you are meaning here?

PhilipDAth
Kind of a big deal
Kind of a big deal

Create a layer 7 firewall rule to block access to a group.

 

Create a group and load all of the IP addresses into that.

 

PhilipDAth_0-1734030217887.png

 

 

Stealth_Network
Getting noticed

I could do that but the group only allows you to add entries one at a time. I have hundreds.

 

 

CptnCrnch
Kind of a big deal
Kind of a big deal

Using Cisco Defense Orchestrator (CDO), nowadays called Security Cloud Control, this would be useable via CSDAC (Dynamic Attributes Connector). Makes sense when you're dealing with more than "only" Meraki MX.

DarrenOC
Kind of a big deal
Kind of a big deal

Think I know the answer already @CptnCrnch but is that free?

Darren OConnor | doconnor@resalire.co.uk
https://www.linkedin.com/in/darrenoconnor/

I'm not an employee of Cisco/Meraki. My posts are based on Meraki best practice and what has worked for me in the field.
Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels