Palo Alto Networks NGFW
VulnCheck Initial Access Intelligence improves Palo Alto Networks NGFW deployments by providing real-time IP Address data via our Tags API.
Customers of Palo Alto Networks NGFW who purchase a VulnCheck Initial Access Intelligence license are able to leverage Palo Alto Networks' Dynamic Block List (DBL) functionality to block attacker Command & Control (C2) infrastructure detected by VulnCheck.
Palo Alto Networks NGFW provides an easy to use Dynamic Block List (DBL) feature, which may be used with third-party intelligence providers like VulnCheck.
For more information on these features from Palo Alto Networks see: How to Configure Dynamic Block List (DBL) or External Block List (EBL)
On your Palo Alto Networks device:
- Go to
Objects > Dynamic Block List
- In the
Namefield, type the name of the VulnCheck Tag, such as
- In the
Sourcefield, enter "https://api.vulncheck.com/v3/tags/vulncheck-c2?token=INSERT_VULNCHECK_TOKEN"
- Fill in other fields as necessary and click OK
VulnCheck Initial Access Intelligence improves Fortinet FortiGate deployments by providing real-time IP Address data via our Tags API.
A description of industry terms and VulnCheck's definiitions, as used in Exploit & Vulnerability Intelligence and Initial Access Intelligence products.