There is talk in the ATP about black hole. I thought on the feature request page we were going to have a manual/advanced blackhole optional list where we could add an IP and all communication from and to for all services would be blocked instantly. Will this be possible in the future?
ATP is a feature that for the 9.2 release mainly focuses on C&C/botnet related threats and updates itself frequently by intel through our Sophos Labs. It's not much of a manually configurable blackhole for now, I'm afraid...
We'll investigate the options for extending it by the requested functionality, so.
ATP is a feature that for the 9.2 release mainly focuses on C&C/botnet related threats and updates itself frequently by intel through our Sophos Labs. It's not much of a manually configurable blackhole for now, I'm afraid...
We'll investigate the options for extending it by the requested functionality, so.
ATP is a feature that for the 9.2 release mainly focuses on C&C/botnet related threats and updates itself frequently by intel through our Sophos Labs. It's not much of a manually configurable blackhole for now, I'm afraid...
We'll investigate the options for extending it by the requested functionality, so.
Understood. It would be a nice feature somewhere, it is a pain to keep a 2 rule list of unwanted ips on the firewalls and making a host entry that I don't care about.
