In the following example of the Appliance Settings: Third Party Feeds page, the managed Network Security appliance does not yet contain third-party feeds.
Note
You can upload a third-party feed only using the Web UI.
The local feed is managed (uploaded and deleted) automatically by the Central Management System appliance. You cannot upload it.
Log in to the Web UI of the Central Management System appliance as Admin.
A connection to the Dynamic Threat Intelligence (DTI) Cloud.
A managed Network Security appliance is deployed in TAP mode or inline mode.
Enable IOCs from third-party feeds. For details, see Enabling or disabling custom IOC feeds .
Create a flat file or an XML-based file in STIX 1.2 format that contains custom blacklist entries. Verify that the file is accessible from the local desktop from which you access the Web UI. For details, see Creating a custom blacklist from third-party feeds .