Follow these steps to upload a third-party feed to the Central Management System appliance using the Web UI.
.png "CM_CustomIOCUploadFeedForm_scap.png")
Log in to the Central Management System appliance as an administrator.
In the Web UI, choose Settings > Appliance Settings.
Select the managed Network Security appliance and then select 3rd Party Feeds.
The page lists the custom feeds that are uploaded.
Click Upload New Feed.
Enter the name of the feed in the Feed Name field.
If you want to override an existing feed with an updated flat file, select the Override checkbox.
Click Choose File to select the flat file or STIX file you want to import.
Choose content type from the Type drop-down menu.
IP
URL
Hash MD5
Hash SHA-256
Domain
STIX
Choose the feed action from the Action drop-down menu.
Alert
Block
(Optional) Enter explanatory information about the intelligence feed in the Comment field.
Click Upload to upload the feed.
The system checks the entries in the custom blacklist file. A progress message appears:
.png "CM_CustomIOCFeedStatus_scap.png")
If there is a problem with the feed that you imported (for example, invalid entries or the wrong format), the following message appears:
.png "CM_CustomIOCFeedValidateError_scap.png")