Threat Intelligence Feeds

The Threat Intelligence Feeds section lists various third-party security products—including Cisco AMP Threat Grid—that have been integrated into Secure Access. Secure Access supports third-party integrations through apps, network devices, and the Secure Access Feeds API. The Secure Access Feeds API is a REST API that enables threat intelligence and security information event platforms to register domain programmatically.

Once integrated into Secure Access, these products build their own custom destination block list of discovered malicious domains. Then the feeds are attached to a rule, just like any other threat category, so that any matches against their special destination block lists are prohibited. Secure Access supports logging and reports of the traffic from the integrated networks.

---

Dispute a Threat Categorization < Threat Intelligence Feeds > Add Threat Intelligence Feeds