Configuring Settings for Custom Feeds
Use the Settings page to specify the number of days for the custom feed to be active and expire once the duration is crossed. Also, specify how often the feeds must be updated.
In the Sky ATP with SDSN, Clouds feed only, and No Sky ATP modes, you can configure the Time To Live (TTL) settings for dynamic address, allowlist, blocklist, infected host, and DDoS feed types. In the Sky ATP mode, you can configure TTL settings for only dynamic address, allowlist, and blocklist feed types.
When you configure a TTL setting for a particular feed type, the configuration is applicable for all the custom feeds belonging to that particular feed type. For example, if you set TTL for Allowlist feed type to 45 days, then all Allowlist feeds will have the same configuration.
To configure Settings:
- Select Configure>Threat Prevention>Feed Source.
The Feed Sources page appears.
- In the Custom Feeds tab, select Settings.
The Settings page appears.
- Complete the configuration by using the guidelines in Table 1.
- Click Update.
The settings are updated and a success message is shown that the Settings are updated successfully.
At the beginning of the Settings page, the last updated settings information is shown. This message is refreshed whenever you update the setting.
Table 1: Fields on the Settings Page
Time to live
Select one of the following options:
Specify how often each feed type must be updated.
By default, all feeds are updated for every 5 minutes.