An administrator configured the FortiGate devices in an enterprise network to join the Fortinet Security Fabric. The administrator has a list of IP…

The best way to automate a firewall policy using a daily updated list of IP addresses is by using an

external connector from Threat Feeds. This allows FortiGate to dynamically retrieve real-time threat

intelligence from external sources and apply it directly to security policies.

By configuring Threat Feeds, the administrator can:

● Automatically update firewall policies with the latest malicious IPs daily.

● Block traffic from those IPs in real-time without manual intervention.

● Integrate with FortiGuard, third-party threat intelligence sources, or custom feeds (CSV,

STIX/TAXII, etc.).