Configure VIP to Block Access to Critical Assets

On Enterprise Core, configure VIPs to Critical Assets, but block traffic coming from devices on the IP Threat Feed (FSM_Threat_Feed) by taking the following steps.

1. Navigate to Policy & Objects > Virtual IPs.

2. Click Create New.

3. Configure settings for forwarding to Web server 1 and Web server 2.

4. Click OK to save.
   

   
   

5. Navigate to Policy & Objects > Firewall Policy.

6. Click Create New.

7. Configure settings for blocking traffic to Webservers if the source is in the FSM_Threat_Feed.
   

   

8. Click OK to save.

9. Create a new policy below the previous policy for allowing traffic to Webservers.
   

   

10. Click OK to save.