Splunk Enterprise Security
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question

Has anybody made a threat feed to firewall rule?

pradeep577
Path Finder
‎09-05-2018 09:25 AM

Hi,

Has anybody tried the below scenario? If yes, can I get some guidance?

Malicious IPs are shown on Splunk dashboard.

I want the script to automatically scan these IP with Virustotal(if possible)...if found malicious, then it would add it to Cisco ASA ACL to block it.

Is this possible?

0 Karma
Reply
Get Updates on the Splunk Community!

Splunk AI Assistant for SPL | Key Use Cases to Unlock the Power of SPL

Splunk AI Assistant for SPL | Key Use Cases to Unlock the Power of SPL  The Splunk AI Assistant for SPL ...

Buttercup Games: Further Dashboarding Techniques (Part 5)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...

Customers Increasingly Choose Splunk for Observability

For the second year in a row, Splunk was recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for ...