Dynamic External ACL

[Andy Guley]

Is there a way in the ASA to point to a file to update an ACL?  Palo Alto has an option to do this.  Is there an equivalent in the ASA?

https://docs.paloaltonetworks.com/pan-os/8-0/pan-os-admin/policy/use-an-external-dynamic-list-in-policy/configure-the-firewall-to-access-an-external-dynamic-list

[Rob Ingram]

Hi,

Not on ASA that I am aware of, but with FTD you can use define a custom Security Intelligence list to blacklist/whitelist traffic. Example here.

HTH

[balaji.bandi]

Personally This is more of Proxy Feature (like WSA/Ironport ) - or as suggested possible with  NGFW