Adding Malicious IPs on security list manually on FWs which don't have threat protection license

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Adding Malicious IPs on security list manually on FWs which don't have threat protection license

L2 Linker

Hi Guys,

 

We have two firewalls with Threat prevention license and few other palo firewalls without threat prevention license. 

I have a requirement to create security rules to block malicious IPs. I can do this easily on FW which has Dynamic external list of malicious IPs because of license but I can't do same thing on other FWs which don't have threat prevention license. 

I can get the malicious IPs from FWs which has threat prevention license and can add them manually to block on FW without license.

I check and there are some around 3500+ malicious and 4000+ high risk IPs in Dynamic list. 

Can anyone suggest me how can I add these IPs in security list easily? It will be very difficult to create address objects for these IPs.

Is there any easy way, I can just copy past these IPs and add them in security list ?

Also, I know these IPs are dynamic and list's IPs can change anytime but my management want to do them anyway. 

Please provide any suggestion for this issue. Thank you so much. 

1 accepted solution

Accepted Solutions

Getting a Threat Prevention license and using an EDL would be the obvious solution. However, you could also create a "Malicious-IPs" address group and assign addresses to it via the CLI using set commands. This might save you some time.
How to Add and Verify Address Objects to Address Group and Secu... - Knowledge Base - Palo Alto Netw...

View solution in original post

2 REPLIES 2

L2 Linker

@BPry @OwenFuller do you have any suggestions on this ? Your help will be appreciated. Thank you

 

Getting a Threat Prevention license and using an EDL would be the obvious solution. However, you could also create a "Malicious-IPs" address group and assign addresses to it via the CLI using set commands. This might save you some time.
How to Add and Verify Address Objects to Address Group and Secu... - Knowledge Base - Palo Alto Netw...

  • 1 accepted solution
  • 1451 Views
  • 2 replies
  • 0 Likes
  • 38 Subscriptions
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!