Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 4 replies
  • Subscribers 27 subscribers
  • Views 898 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Signature Sinkhole

Jirayu Siangsai

Firmware version 17.0 have this signature but firmware version 18.5, 19.0, and 19.5 do not have this signature. Can anyone have firewall firmware version 19.5.1 and search in IPS policies have this signature and capture image reply me pls..

Thanks in advance.



This thread was automatically locked due to age.
Parents
  • 0

    Currently my firmware version is 19.0.0 GA no plan to upgrade yet but I'm curious Is firm ware version 19.5.1 have signature Sinkhole "MALWARE-CNC Torpig bot sinkhole server DNS lookup" like sophos support said. 

  • 0 in reply to Jirayu Siangsai

    Hello there,

    Thank you for contacting the Sophos Community.

    Can you share the Case ID, that you opened with us, I see Case 06341469 under your account,t but I don't see any email where Sophos Support states that the IP signature you mention is supported.

    Currently, version 19.5 MR1 doesn't have that IP Signature. 

    Regards,

     
    Emmanuel (EmmoSophos)
    Technical Team Lead, Global Community Support
    Sophos Support Videos | Product Documentation  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.
  • 0 in reply to emmosophos

    My case number is 06341469.I used to talk to Mr. Kris... M he said I have to upgrade firmware to 19.5.1 the problem will resolve but I have some exam from firmware version 19.5.1 don't have signature sinkhole. I wonder why firmware version 17.0 have sinkhole signature.

    Picture1 version 19.5.1 it gone. and picture 2  have sinkhole from version 17.0. 

    If you said 19.5. mr1 doesn't have that ip signature so if I want to use DNS sink hole how can I use it in sophos firewall.

Reply
  • 0 in reply to emmosophos

    My case number is 06341469.I used to talk to Mr. Kris... M he said I have to upgrade firmware to 19.5.1 the problem will resolve but I have some exam from firmware version 19.5.1 don't have signature sinkhole. I wonder why firmware version 17.0 have sinkhole signature.

    Picture1 version 19.5.1 it gone. and picture 2  have sinkhole from version 17.0. 

    If you said 19.5. mr1 doesn't have that ip signature so if I want to use DNS sink hole how can I use it in sophos firewall.

Children
Unfiltered HTML