Cisco

Prerequisites

• A Cisco firewall or gateway that supports external blocklist ingestion.
• A Trusteed account with access to the Noise-Aware IP blocklist feed.

Setup Steps

1. Log into your Trusteed Console.
2. Navigate to Integrations → Firewalls → Cisco.
3. Click Connect under the Cisco logo and assign a unique integration name.
4. Copy the credentials (shown once) for configuring your Cisco firewall.
5. In Cisco, follow the vendor documentation for adding an external blocklist feed.
6. Paste the Trusteed feed URL in the following format:

https://<username>:<password>@api.trusteed.io/v1/integrations/<integration_id>/content


1. Save and activate the feed.

Blocklist Format Example

Trusteed provides the feed in plain text format, one IP per line:

192.168.38.187
192.168.38.186


Outcome

• Known attacker IPs are automatically blocked at the Cisco firewall.
• SIEM/SOAR pipelines receive fewer false positives.
• Analysts focus on high-fidelity signals instead of background noise.

Next Steps

• Browse Trusteed’s Integration Catalog to add more feeds.
• Combine Cisco enforcement with SIEM/SOAR logging for full visibility.
• Automate playbooks with Trusteed’s enriched intelligence for faster remediation.

‍

‍