topic Re: How to use dynamic block list? in General Topics

How to use dynamic block list?

Gururaj — Wed, 18 Sep 2013 07:53:24 GMT

Hi All,

Kindly help me to understand this,

How to use dynamic block list? how it will work? and where to use this ( in policy)?

Regards,

Gururaj

Re: How to use dynamic block list?

harshanatarajan — Wed, 18 Sep 2013 08:26:31 GMT

Hello

Have you had a chance to look at this doc. Hope it helps.

Working with External Block List (EBL) Formats and Limitations

Re: How to use dynamic block list?

harshanatarajan — Wed, 18 Sep 2013 08:58:08 GMT

Hello Gururaj

Below is some additional information -

Dynamic Block Lists

Objects > Dynamic Block Lists

Use the Dynamic Block Lists page to create an address object based on an imported list of IP addresses. The source of the list must be a text file and must be located on a web server. You can set the Repeat option to automatically update the list on the device hourly, daily, weekly, or monthly. After creating a dynamic block list object, you can then use the address object in the source and destination fields for security policies. Each imported list can contain up to 5,000 IP addresses (IPv4 and/or IPv6), IP ranges, or subnets.

The list must contain one IP address, range, or subnet per line, for example:

“192.168.80.150/32” indicates one address, and “192.168.80.0/24” indicates all addresses from 192.168.80.0 through 192.168.80.255.

Example:

“2001:db8:123:1::1” or “2001:db8:123:1::/64”

IP Range:

To specify an address range, select IP Range, and enter a range of addresses. The format is:

ip_address–ip_address

where each address can be IPv4 or IPv6.

Example:

“2001:db8:123:1::1 - 2001:db8:123:1::22”

Field	Description
Name	Enter a name to identify the Dynamic Block List (up to 32characters). This name will appear when selecting the source or destination in a policy.
Description	Enter a description for the block list (up to 255 characters).
Source	Enter an HTTP or HTTPS URL path that contains the text file. For example, http://1.1.1.1/myfile.txt. You can also enter a UNC server path.
Repeat	Specify the frequency in which the list should be imported. Youcan choose hourly, daily, weekly, or monthly. At the specified interval, the list will be imported into the configuration. A full commit is not needed for this type of update to occur.
Test Source URL	Test that the source URL or server path is available