topic Re: Request to add to PA curated IP lists? in Advanced Threat Prevention Discussions

Request to add to PA curated IP lists?

DIR_IT — Thu, 24 Sep 2020 14:56:45 GMT

Is there a way to request IPs are added to curated IP lists? Or is there a preferred dynamic list of IP abusers that you use with your PA?

Thanks very much for your assistance. Please forgive me, I am new to Palo Alto.

Re: Request to add to PA curated IP lists?

Abdul-Fattah — Thu, 24 Sep 2020 15:54:58 GMT

you can use an external services that provides such as Spamhaus...etc

or you can also create your own list.

Re: Request to add to PA curated IP lists?

mivaldi — Thu, 24 Sep 2020 16:53:39 GMT

The best route would be to use a custom EDL.

If you want the IP's to be considered to be added to the list for every Palo Alto Networks customer, you can submit a Support case and request the IP's be evaluated to be added to the high-risk IP pre-defined EDL, but based on experience there's an extreme vetting process to move IP's to the pre-defined list, and many you consider curated may not make it to the list.

Re: Request to add to PA curated IP lists?

DIR_IT — Thu, 24 Sep 2020 17:27:05 GMT

I see Spamhaus. Any other well curated lists that I should consider?

Thanks so much for everyones input!

Re: Request to add to PA curated IP lists?

mivaldi — Thu, 24 Sep 2020 21:15:14 GMT