Harmony Email & Collaboration now supports live IOC feeds from MANDIANT and Health-ISAC, custom MISP-format integrations, and exclusion rules – giving organizations more flexibility and control over imported threat indicators.

Global IOC Management is a central interface that enables organizations to continuously import Indicators of Compromise (IOCs) from live feeds, ensuring proactive threat prevention across all Check Point products. By automatically applying these IOCs for detection and blocking, including in Harmony Email & Collaboration, security teams can stop threats before delivery without relying on time-consuming post-delivery response mechanisms.

The latest update introduces out-of-the-box support for two additional intelligence feeds: MANDIANT and Health-ISAC, both of which are widely trusted sources of timely, high-fidelity threat indicators. In addition, customers can now integrate any custom IOC feed that uses the widely adopted MISP format, expanding flexibility and compatibility.

A new exclusion mechanism also allows customers to define IOCs that should not be enforced – even if they appear in a live feed – adding a layer of customization that helps prevent overblocking or false positives.

To configure integrations with live IOC feeds, visit the IOC Management page in the portal. This capability is included with every Harmony Email & Collaboration license – no special subscription is required.

You may also like