Cisco Firepower Integration Guide
Cisco Firepower Threat Defense (FTD / FMC) Integration
OpenDBL lists can be imported directly into Cisco Firepower Management Center (FMC) as Security Intelligence Feeds.
Format Compatibility Notice: Cisco FMC requires single IPs or CIDR subnets. Use DShield or Blocklist.de All for seamless ingestion.
1
Create Security Intelligence Feed Object
In FMC, navigate to Objects > Object Management > Security Intelligence > Network Lists and Feeds and click Add Network List/Feed.
2
Configure Feed URL & Interval
Set Type to Feed, enter a Name (e.g. OpenDBL_DShield), paste the feed URL (e.g. https://opendbl.net/lists/dshield-expanded.list), and set Update Frequency to 15 minutes.
3
Enforce in Access Control Policy
Under Policies > Access Control, open your policy and click the Security Intelligence tab. Add the feed object to the Network Blacklist and deploy changes to FTD gateways.