You configured the FortiGate devices in an enterprise network to join the Fortinet Security Fabric.

In the Fortinet Security Fabric, External Feeds (also referred to as Threat Feeds or Fabric Connectors) are specifically designed to handle dynamic, frequently changing lists of security objects. These connectors allow the FortiGate to automatically retrieve a list of IP addresses, domain names, or malware hashes from a remote HTTP/HTTPS server at regular intervals (e.g., daily). Once the connector is configured, the resulting " Threat Feed " object can be used directly in firewall policies as a source or destination address. This automates the blocking process without requiring manual policy changes, metadata variables, or CLI scripts each time the list is updated.

==============