Create a Malicious IP Profile

Use the following procedure to create a malicious IP profile:

Procedure

Step 1	Navigate to Manage > Profiles > Malicious IPs.
Step 2	Click Create.
Step 3	Provide a unique Profile Name.
Step 4	(Optional) Enter a Description. This can help differentiate between other profiles with similar names.
Step 5	Check the box to enable IP Reputation.
Step 6	Choose one of the two options for the Trustwave Ruleset Version drop-down menu: Manual - The selected ruleset version is used by the Multicloud Defense datapath engine on all gateways which use this profile. The profile will not be automatically updated to newer ruleset versions. Automatic - Select the number of days to delay the update, after the ruleset version is published by Multicloud Defense. New rulesets are published frequently by Multicloud Defense. The gateways using this profile are automatically updated to the latest ruleset version which is N days or older, where N is the "delay by days" argument selected from the dropdown. For example, if you select to delay the deployment by 5 days on Jan 10, 2021, the Multicloud Defense controller will select a ruleset version which was published on Jan 5th or before. Note that Multicloud Defense may not publish on some days if our internal testing with that ruleset version fails for some reason.
Step 7	Click Save.

Attach the profile to a policy rule set. See Rule Sets and Rule Set Groups for more information.