cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Who rated this post

L4 Transporter

Hello @A.Faruq ,

I would recommend you create a series of delete and exclusions for private IP ranges using their subnet range definition in addition you can exclude organizational domains as these may offer little benefit as an indicator. I would recommend reading the recommendation for this from the Palo Docs.

In regards to managing the premium Threat Intel integration, you can work out how to limit it for only suitable indicators of a specific types.

Link to Docs 

I hope this helps you to understand how to manage this correctly. 

Many thanks,

MichaelSysec

 

PCSAE

View solution in original post

Who rated this post