Integrate Feodo blacklist for Emotet

[ThomasK]

Dear support,

would it be possible to integrate the Feodo blacklist into the McAfee Web Gateway to monitor/block Emotet connections?

They provide an csv based download file at https://feodotracker.abuse.ch/blocklist/

Thanks,
thomas

[jacek · Accepted solution]

You can use Mcafee built-in Feodo list.
Go to Policy - Lists - Add (button) - List Content is managed remotely - McAfee Supplied List - Choose (button)
and select "Feodo Domain Blocklist" or "Feodo IP Blocklist".

But if you want to create your own lists, you can create "Customer maintained list" and configure it as you wish.

When you have configured list. you can use it in a rule (policy - rule set) and select action as you wish (block or report).