We have a customer who recently suffered from an unsuccessful attack to/through their MX250 from a country that should not be trying to access their network.
I understand that this could have been a hidden address range etc and that it is possible to manually blacklist IP addresses/ranges but is there an automated update of malicious IP addresses that can be sent to the MX, maybe from Talos that provides automatic protection from known malicious ranges?
