https://community.cisco.com/t5/network-security/how-to-block-an-ip-address-on-ftd-based-on-priority-and/m-p/5038669#M1109813 <P>if this IP run any DDoS then try&nbsp;<BR />use flexconfig and thread-detection shun<BR />MHM</P> Wed, 13 Mar 2024 10:32:00 GMT MHM Cisco World 2024-03-13T10:32:00Z https://community.cisco.com/t5/network-security/how-to-block-an-ip-address-on-ftd-based-on-priority-and/m-p/5038489#M1109808 <P>Dear Community,</P><P>I am searching for a solution to automatically add the source IP of an attacker to the global block list when they perform a Priority Impact 1/2 attack.</P><P>Regards</P> Wed, 13 Mar 2024 06:59:49 GMT https://community.cisco.com/t5/network-security/how-to-block-an-ip-address-on-ftd-based-on-priority-and/m-p/5038489#M1109808 Sopera 2024-03-13T06:59:49Z https://community.cisco.com/t5/network-security/how-to-block-an-ip-address-on-ftd-based-on-priority-and/m-p/5038657#M1109812 <P>You can manually add the IP in to Black list or if the IP blocked security intellegence to get the feeds.</P> <P>you need to find a way to manipulate using API based on the attack vector and add in to block list, that is what i am thinking my views</P> Wed, 13 Mar 2024 10:15:14 GMT https://community.cisco.com/t5/network-security/how-to-block-an-ip-address-on-ftd-based-on-priority-and/m-p/5038657#M1109812 balaji.bandi 2024-03-13T10:15:14Z https://community.cisco.com/t5/network-security/how-to-block-an-ip-address-on-ftd-based-on-priority-and/m-p/5038669#M1109813 <P>if this IP run any DDoS then try&nbsp;<BR />use flexconfig and thread-detection shun<BR />MHM</P> Wed, 13 Mar 2024 10:32:00 GMT https://community.cisco.com/t5/network-security/how-to-block-an-ip-address-on-ftd-based-on-priority-and/m-p/5038669#M1109813 MHM Cisco World 2024-03-13T10:32:00Z https://community.cisco.com/t5/network-security/how-to-block-an-ip-address-on-ftd-based-on-priority-and/m-p/5041553#M1109956 <P>Can you provide me the <SPAN>flexconfig</SPAN> commands to do the same ,</P><P>Flex config is very hard to create</P> Sun, 17 Mar 2024 05:59:24 GMT https://community.cisco.com/t5/network-security/how-to-block-an-ip-address-on-ftd-based-on-priority-and/m-p/5041553#M1109956 Sopera 2024-03-17T05:59:24Z https://community.cisco.com/t5/network-security/how-to-block-an-ip-address-on-ftd-based-on-priority-and/m-p/5041563#M1109957 <P>in addition what i have said before use below guide to&nbsp; see if that work for you.</P> <H3 id="ariaid-title15" class="title topictitle3">Protect Servers from a SYN Flood DoS Attack (TCP Intercept)</H3> <P><A href="https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/threat_defense_service_policies.html" target="_blank">https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/threat_defense_service_policies.html</A></P> Sun, 17 Mar 2024 07:51:30 GMT https://community.cisco.com/t5/network-security/how-to-block-an-ip-address-on-ftd-based-on-priority-and/m-p/5041563#M1109957 balaji.bandi 2024-03-17T07:51:30Z