Cisco
Login
Search
Software Secure Firewall Threat Defense
Platform Secure Firewall Threat Defense Virtual
Activity Onboard

Objects and Certificates Object Management Sinkhole Creating Sinkhole Objects

Last updated: Jul 29, 2025

Creating Sinkhole Objects

You must have the IPS license (for Firewall Threat Defense devices) or the Protection license (all other device types).

Procedure

1

Choose Objects > Object Management.

2

Choose Sinkhole from the list of object types.

3

Click Add Sinkhole.

4

Enter a Name.

5

Enter the IPv4 Address and IPv6 Address of your sinkhole.

6

You have the following options:

  • If you want to redirect traffic to a sinkhole server, choose Log Connections to Sinkhole.
  • If you want to redirect traffic to a non-resolving IP address, choose Block and Log Connections to Sinkhole.
7

If you want to assign an Indication of Compromise (IoC) type to your sinkhole, choose one from the Type drop-down.

8

Click Save.

Previous topic Sinkhole Next topic SLA Monitor