FortiGuard IP address threat feed

[AEK]

Hello

Is there a FortiGuard IP address threat feed? Like C&C, Spam sources, etc, ...

I know we can block bad IP addresses directly from IPS, DNS filter & Antispam profile, but is it available from Fortinet as URI to use as external source in IP address threat feed?

[kcheng · Accepted solution]

 Dear @AEK 

We do not offer FortiGuard URI as external source of IP address threat feed. The FortiGuard resources are designed to be used with Fortinet products, hence, these information are embedded into the respective security profiles:

https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/668865/ips-with-botnet-c-c-i...

https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/68937/ip-reputation-filterin...

[DeannaAlexander]

Yes, FortiGuard does offer various threat feeds, including malicious IP addresses for C&C and spam sources which can be integrated. You can access these feeds via Fortinet's API. It’s essential to keep your security tools updated to mitigate risks. Speaking of mitigation, I recently played the Bad Parenting game, which humorously highlights how important good decisions are—much like in cybersecurity!