Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 11 replies
  • Subscribers 1 subscriber
  • Views 1670 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Site NOT picked up by Astaro

emerson8
Tested through 3 different installations of Astaro, all patched and uptodate.
( 3 different client-sites )


Surfing to AAA Alpha Architects display without errors or block from Astaro,
but, my client-installed superantispyware's realtime protection "screams"
about a trojan/virus,, and checking the source on that page, it makes a hidden redirec to a site in Russia over port 8080...??


Note; It seems that this page does NOT try to send/download the virus/trojan on each connect.??

Is Astaro missing it, or is Superantispyware wrong ?


This thread was automatically locked due to age.
Parents
  • 0
    OK, so you have the HTTP Proxy set to block uncategorized URLs.  I think that means that the Astaro anti-spyware, anti-virus never took a look at the page on ageegle.ru, but your local anti-spyware recognized the redirect as a likely trap.  I don't think that the Astaro uses that approach.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0
    OK, so you have the HTTP Proxy set to block uncategorized URLs.  I think that means that the Astaro anti-spyware, anti-virus never took a look at the page on ageegle.ru, but your local anti-spyware recognized the redirect as a likely trap.  I don't think that the Astaro uses that approach.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data