Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Cajuntank
Contributor II

Blocking threats using Internet service database and Threat Feeds thoughts?

Was just running through some clean up and auditing some processes and wanted to get some thoughts of what others might be doing in regards of having both ISDB (https://community.fortinet.com/t5/FortiGate/Technical-Tip-Blocking-Potential-threats-over-Internet-s...) and Threat Feeds applied to policies and profiles?

 

As inferred by the link provided, I have deny policy tied to those ISDB services but I also have Threat Feeds to my local ISAC (https://www.cisecurity.org/) I am a member of as well as Cisco Talos, for example, that I tie to policies and profiles. 

 

So in a nutshell, do you think FortiGuard is enough for you or do you "cover your bases" with 3rd parties... just in case? (and this is assuming you don't have any resource concerns). 

 

 

1 REPLY 1
Cajuntank

I don't have any issues with ingesting those feeds or anything like that. My question was more in regards of what do others do in this regard... do they trust FortiGuard completely or are they implementing both just in case. Just playing devil's advocate in my head a bit in saying that I "don't put all my eggs in one basket" but also, I'm sure this is extremely duplicative with having both as I have to assume FortiGuard and others like Cisco are very comparable with this, but there might be something someone can elaborate on that I'm missing.

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors