How is Cisco Security able to dynamically add IP addresses of known malware domains to its list of ports to detect and block?

{} [+]