I follow multiple threat intelligence feeds. They alert us to known threats so we can block them ahead of time. Currently, we are doing this manually. Ip address by ip address (or country or etc.) for all of our boxes. It would be a great help to be able to import from external sources.