cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
mekafir
Level 7
Report Inappropriate Content
Message 1 of 3

Does MWG have daily updated list of Suspicious IP Addresses ?

People,

I wonder if the current McAfee Web Gateway procy application does have the daily updated list of suspicious IP addresses ?

For example, I'm a subscriber of https://www.recordedfuture.com/cyber-threat-intelligence list which sends me daily known / dangerous IP addresses like:

81[.]183[.]56[.]217

Hits: 23 | First seen in Recorded Future on 27 Oct 2014 22:17:57

178[.]32[.]173[.]180

Hits: 23 | First seen in Recorded Future on 03 Sep 2015 20:56:36

46[.]109[.]168[.]179

Hits: 22 | First seen in Recorded Future on 27 Oct 2014 22:48:33

185[.]129[.]148[.]19

Hits: 21 | First seen in Recorded Future on 03 Aug 2016 10:40:59

194[.]67[.]210[.]183

Hits: 20 | First seen in Recorded Future on 18 Aug 2016 14:29:18

Note: I'm using The hardware appliance MWG version 7.5.2.5.0 (20828), so not sure if there is a feature like that ?

Any help and suggestion would be greatly appreciated.

Thanks,

M

2 Replies

Re: Does MWG have daily updated list of Suspicious IP Addresses ?

Naturally MWG uses its GTI integration feature for IP reputation. See Check Single URL

if you have external list of IPs, you can store it as text file and use such file as source for Customer maintained list. See doc at

Hope it helps.

Troja
Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 3 of 3

Re: Does MWG have daily updated list of Suspicious IP Addresses ?

Hi ​,

IP-Reputation is updated in regulary intervals. You can change the scheduling value. Additional, if there is not entry in the local URL Filter Database (IP Reputation is included in the URL Filter database) MWG does a GTI lookup in Real Time.

You can configure forward and backward DNS lookup (and other stuff) in the URL Filter settings.

MWG URL Filter Settings.GIF

Finally, yes, IP Reputation is updated in regular intervals and also in real time.

Hope this helps,

Cheers.

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community