I know this has been requested multiple times but could you guys please look into the ability to import IP's into IP Host Groups via external url as we are able to do with URL Categories as it's especially useful for non WAF-able services . We have threatfeeds that we pay for that include things such as Anti-Bogon , Anti-Tor Exit Nodes , Anti-Bruceforce IP Addresses to help reduce noise to services on the internet.
I have to use a different brand of firewall at the moment for these hosted services as the sheer amount of noise without these filters filtering down to the DMZ zone absolutely fills my logs with garbage.Whilst they don't stop a well prepared attacker it really helps clean logs and netflow as well as slow down scanners and probe bots on the internet.The current firewall can be set to a minimum refresh/reload of 1H to update these feeds.
In a perfect world I can sunset that awful expensive box and replace it with an XG but would need some help from XG devs.
This thread was automatically locked due to age.
