Custom IOC feeds

This section covers the following information:

About custom IOC feeds
Task list for managing custom IOC feeds
Uploading a third-party feed using the Web UI
Creating a custom blacklist from third-party feeds
Viewing custom feed details using the Web UI
Viewing custom feed details grouped by alert using the Web UI
Deleting third-party IOC feeds using the Web UI
Downloading a third-party feed using the Web UI
Allowed and blocked lists
Managing threat intel feeds using TAXII

Note

This section describes how to manage custom IOC feeds on standalone appliances only. To manage custom IOC feeds on managed appliances, see "Configuring Custom IOC Feeds" in the Central Management System Administration Guide.