External Block List (Threat Feed)

如何建立外部的 IP 封鎖清單

# Explame Paltfrom: Fortigate 20xE / 6.2.11

Ref:Fortigate Threat feeds(6.2.x)
Ref:External Block List (Threat Feed) – Policy(6.2.0) 
Ref:All Cybercrime IP Feeds by FireHOL

• [Security Fabric] → [Fabric Connectors]  → [Create New] → [IP Address]
  
  
• 以 [https://raw.githubusercontent.com/ktsaou/blocklist-ipsets/master/firehol_level1.netset] 為 List 來源
  

  
• 在 Policy 引用 (記得 Block Deny Policy 要在前面)
  

  
• 建議搭配 [Intrusion Prevention]及其Block [Botnet C&C]、DNS Filter、Web Filter