Cisco
Login
Search
Software Multicloud Defense
Activity Onboard

Profiles for Security and Gateway Security Profiles Malicious IP Profile Create a Malicious IP Profile

Last updated: Jul 03, 2025

Create a Malicious IP Profile

Use the following procedure to create a malicious IP profile:

Procedure

1

In the Security Cloud Control platform menu, choose Products > Multicloud Defense .
2

Navigate to Policies > Profiles > Malicious IPs.
3

Click Create.
4

Provide a unique Profile Name.
5

(Optional) Enter a Description. This can help differentiate between other profiles with similar names.
6

Check the box to enable IP Reputation.
7

Choose one of the two options for the Trustwave Ruleset Version drop-down menu:

  • Manual - The selected ruleset version is used by the Multicloud Defense datapath engine on all gateways which use this profile. The profile will not be automatically updated to newer ruleset versions.

  • Automatic - Select the number of days to delay the update, after the ruleset version is published by Multicloud Defense. New rulesets are published frequently by Multicloud Defense. The gateways using this profile are automatically updated to the latest ruleset version which is N days or older, where N is the "delay by days" argument selected from the dropdown. For example, if you select to delay the deployment by 5 days on Jan 10, 2021, the Multicloud Defense controller will select a ruleset version which was published on Jan 5th or before. Note that Multicloud Defense may not publish on certain days if internal testing with that ruleset version fails.
8

Click Save.

What to do next

Attach the profile to a policy rule set. See Rule Sets and Rule Set Groups for more information.

Previous topic Malicious IP Profile Next topic IP Reputation