---
title: "Creating and Adding Custom TIDE Feeds"
canonical: "https://docs.infoblox.com/space/BloxOneThreatDefense/35403424/Creating%20and%20Adding%20Custom%20TIDE%20Feeds"
format: markdown
---
## Creating a TIDE Profile for Custom TIDE Feeds (BYOF)
Custom TIDE feeds can be added by first creating a new TIDE data profile and then adding a custom created TIDE feed to the profile. For information on creating TIDE data profiles, see *[Data Profiles](https://infoblox-docs.atlassian.net/wiki/spaces/BloxOneThreatDefense/pages/35468021)*.
> ℹ️ **Note**: A data profile must be associated with a governance policy before it can be used for an upload.
# TIDE Data Upload Workflow
TIDE’s Bring Your Own Feed (BYOF) enhancement allows administrators to configure an RPZ or feed with a URL-based data source. TIDE automatically imports and refreshes indicators from the source every hour. BYOF supports CSV and plain-text files, basic username and password authentication, and API-based imports. Administrators can view source details, associated RPZ or feed configurations, the most recent update time, and the number of imported indicators.
The *Data Upload* page allows administrators to submit threat-intelligence indicator data to TIDE using either a local text file or a file hosted at a remote URL. Each upload must be associated with a data profile. The data profile determines the governance policy applied to the submitted indicators.
Once the feed is configured it will automatically update the content every hour.
> ℹ️ **Note**: When configuring the feed, enable the egress IP addresses through your firewall as follows: **18.206.144.116** and **3.221.42.234**. Both IPs are located in the United States.
To upload indicator data, go to **Configure > Security > TIDE > Data Upload** and do the following.
## Step 1. Select a data profile
1. Open the **Select data profile** list.
2. Select the data profile that should be associated with the uploaded data.
## Step 2. Select the upload method
Choose one of the following upload methods.
### **File Upload**
Upload a data file from the local system.
### **URL Upload**
Retrieve data from a file hosted at a remote URL. The URL must point to a supported `.txt` file.
## Upload a local file
To upload a local indicator file, do the following.
1. Select **File Upload**.
2. Choose the data file from the local system.
3. Verify that the file meets the required format and size limits.
4. Select **Validate and Save**.
## Upload data from a URL
To upload indicator data from a remote URL, do the following.
1. Select **URL Upload**.
2. Enter the location of the file in the **URL** field.
3. Confirm that the URL points to a supported `.txt` file.
4. Enter the appropriate values in the **Username** and **Password** fields.
5. Select **Validate and Save**.
## Available actions
### **Validate and Save**
The **Validate and Save** button validates the selected data profile, upload method, source, credentials, and indicator content. If validation succeeds, the upload is saved and submitted for processing. The upload result is recorded in **Upload History**. The button remains disabled until all required fields are completed.
### **Force Update**
The **Force Update** button immediately retrieves and processes data from a configured URL. Use this option to start an update without waiting for the next scheduled update interval. Feeds will automatically update the content every hour. **Force Update** applies to URL-based uploads and is available only after a valid URL upload has been configured.
## Upload History
The **Upload History** table records previous upload attempts. Administrators can review previous submissions in the *Upload History* table.
## Viewing Custom TIDE Feed Details
Custom TIDE BYOF details can be viewed in the *Threat Feed Details* panel in the Infoblox Portal. To view the *Threat Feed Details* panel, log into the infoblox Portal and go to **Security** > **Configuration** > **On-Prem DNS Firewall**. In the *Threat Feed Details* panel, you will find the address for your custom TIDE RPZ feed. On the **On-Prem DNS Firewall Policies **page, click **Feed Configuration Values **(Step 2) to view your organization's feeds, including your organization's custom created RPZ feeds.
## Adding a Custom TIDE Feed to a Security Policy
Custom TIDE feeds (TIDE BYOF feeds) can be added to a new or existing security policy as a policy rule. To add a custom TIDE feed to a security policy, do the following:
1. Select *Feeds and Threat Insight* as a rule type on the *Policy Rules* pane.
2. On the *Policy Rules* pane, select **Feeds and Threat Insight** as a rule type.
3. From the *Name* column, scroll through the list of available feeds under the **Choose a Feeds and Threat Insight** menu until you locate the desired custom TIDE feed. The custom RPZ feed description is the same description as what was provided when the data profile for the feed was created.
4. Select the custom TIDE feed from the feeds listed and apply an action (Action list)
5. From the *Action* column, select a rule action for the custom TIDE feed. Action options include:
- Allow - No Log
- Allow - With Log
- Block - No Redirect
- Block - Default Redirect
- Block - Custom Redirect
- Block (No Log) - No Redirect
- Block (No Log) - Default Redirect
- Block (No Log) - Custom Redirect
6. Click **Next** to complete the Security policy wizard, or click **Finish** to finalize the security configuration process.
For information on adding policy rules to a security policy, see *[Adding Policy Rules and Setting Precedence](https://infoblox-docs.atlassian.net/wiki/spaces/BloxOneThreatDefense/pages/35403288)*.