AnsweredAssumed Answered

Live - Custom Feed

Question asked by Evan Ramos on Oct 12, 2016
Latest reply on Oct 14, 2016 by Evan Ramos

Version SA 10.6.1 - 

 

This might be a stupid question but, is it possible to setup a recurring custom live feed with a single column (list of IP addresses). Example could be something simple like this IP list; https://rules.emergingthreats.net/blockrules/compromised-ips.txt  - i dont believe RSA provides this as a feed in Live.

 

When i add a Key (ip.dst) on the column, SA says well you gotta have an Index. So I set an Index on column , wipes the Key value , and SA says well you gotta have a key. ~loop~

 

I assume its not possible? 

Outcomes