Page tree

Contents

To create a custom list, complete the following:

  1. From the Cloud Services Portal, click Policies → Security Policies.
  2. On the Security Policies page, click the Custom Lists tab located above the top Action bar.
  3. On the Custom Lists page, click Create at the top Action bar.
  4. On the Create a Custom List page, complete the following:
    • Custom List Name: Enter a name for the custom list. Ensure that you use a unique name for each custom list.
    • Description: Enter a brief description of the custom list.
    • Threat Rating: Select a Threat Rating level from among the following options: Info, High, Medium, and Low. The system default value for a custom list is Info. The default Threat insight value is High. For more information creating a custom list with customer-defined threat rating level, see Customer-Defined Threat Level and Confidence Score for Custom and Threat Insight Lists.
    • Threat Confidence: Select a Threat Confidence score from among the following options: High, Low. Medium. The system default value for a custom list is Info. The default Threat insight value is LowFor more information creating a custom list with customer-defined threat confidence score, see Customer-Defined Threat Level and Confidence Score for Custom and Threat Insight Lists.
    • Domains/IP Addresses: Enter a fully qualified domain name (FQDN), a valid IPv4 address, or a CIDR that you want to include in the whitelist or blacklist that you are creating. You can enter multiple domains or IP addresses by repeating the same steps. For each domain or IP address added to a custom list, a description for the domain or IP address can also be added to improve the investigative process. When finished, press any key on your keyboard to accept the entry. To remove a domain or IP from the list, place a check the box to the left of the entry and then click the Remove button.  
  5. Click Save & Close to save the configuration. BloxOne Threat Defense Cloud adds the custom list.

You can also import a list of domains by uploading a CSV file. Ensure that you use domain as the header in the CSV file.

To import a CSV file, complete the following:

  1. On the Custom Lists page, click Import at the top Action bar.
  2. To import a new list, select the Import New List radial button.
  3. In the Import Custom List dialog, complete the following:
  4. You can either drag the CSV file into the “Drag file here” space or click Select file and navigate to the file to upload it. Note that you must include the required field domain in the header of the file to ensure a successful import. 
  5. Click Import to import the file.

To apply customer-defined threat levels to your custom list, see Customer-Defined Threat Level and Confidence Score for Custom and Threat Insight Lists.


  • No labels

This page has no comments.