Create a sinkhole object

Create a sinkhole object to redirect or block suspicious traffic for enhanced threat detection and analysis.

Use this task when you need to configure a sinkhole object for traffic redirection or blocking to maintain security.

Before you begin

Ensure you have the IPS license (for Firewall Threat Defense devices) or the Protection license (all other device types).

Procedure

Step 1

Choose Objects > Sinkhole.

Step 2

Click Add Sinkhole.

Step 3

Enter a Name.

Step 4

Enter the IPv4 Address and IPv6 Address of your sinkhole.

Step 5

You have these options:

  • To redirect traffic to a sinkhole server, choose Log Connections to Sinkhole.
  • To redirect traffic to a non-resolving IP address, choose Block and Log Connections to Sinkhole.

Step 6

(Optional) From the Type drop-down list, assign an Indication of Compromise (IoC) type for the sinkhole object, if needed.

Step 7

Click Save.