Skip to main content

Industry blocklist

Healthcare and Medical blocklist

Filter observed scanners at exposed clinical service edges while leaving carefully scheduled system changes to care teams.

The coverage

What our sensors observed

Our sensors saw probes against medical imaging, clinical integrations, laboratory systems, and healthcare application services. These interfaces can connect separate systems that need to remain available for care teams.

Why use this feed

Use an edge rule to review or filter observed scanners around exposed clinical integrations. The rule can be applied at the perimeter when changes to the underlying systems require careful scheduling.

In your network

Where this feed fits

Use the observed source list where your existing edge controls meet these reachable services.

Imaging exchange

Review scanner sources at the perimeter of reachable imaging and study exchange interfaces.

Clinical integrations

Apply an edge rule around interfaces that connect separate care systems without changing the systems themselves.

Laboratory services

Use a current list for reachable laboratory gateways where maintenance windows may be limited.

Getting started

Put the feed to work

Choose your industry coverage, connect the feed to your existing firewall, and review exceptions with the people who run each service.

Choose coverage

Select this industry in a blocklist plan. Your selected industries and included threat categories are delivered in one continuously updated feed.

Connect your edge

Pull the feed in a supported format or use a firewall preset. Optional network aggregation can help where rule capacity is limited.

Review access

Check exceptions and existing allowlists before applying a deny rule to any service that needs outside connections.

Scope of the data

What this feed measures

The mapping is about clinical service interfaces seen by our sensors. It does not identify a patient system or show that care data was accessed.

Our sensors record connections to mapped services. The resulting source list helps you review or block observed scanners; it does not reveal what those scanners intended to do.

Industry blocklists

Start blocking observed scanner sources.

Test a scanner sample in your existing security tools, then choose the coverage that fits your network.

Your next step

Choose this industry in a blocklist plan. The feed stays current as our sensors observe new scanner sources.