[9.165][ANSWERED]BOTNET control where does it live?

i have installed the beta via the u2date upgrade. Went in very quickly, no fuss and the reboot was very quick.
Read Angelo's story and can't find the botnet config or story.
I haven't installed the new licence yet, about to do that, but that should only enable a feature not bring it out of hiding.

my typing hasn't improved.

Ian

0 trollvottel over 11 years ago

Network Protection >> Advanced Threat Protection. And there is a new widget in the Dashboard, which you have to select/enable first if you imported from an old config (click on the small gearwheel in the upper-right). The feature under-the-hood extends HTTP-Proxy, IPS, Packetfilter, DNS & Application control filtering.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 snowcrash_01 over 11 years ago

Hi Ian,
welcome on board (again).

ATP is located in Network Protection >> Advanced Threat Protection. But it's also included in other features when enabled. So if you enable ATP globally in the menu above, there are some additional services like DNS, IPS, HTTP-Proxy which are aware of that.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 RFCat_vk_01 over 11 years ago in reply to snowcrash_01

Hi Snowcrash, Mario,
welcome back to more fun and serious testing.

Thank you for the pointers. I would never have guessed that the botnet was ATP. When you enable ATP the botnet is replaced with a green icon that advises system okay.
I think the labeling needs to be improved for the ATP in the dashboard, because when disabled the window talks about infected servers.

Ian
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel