Q: Which browsers support URL reputation?Ī: For a list of supported browsers, see Supported browsers for Browser Intrusion Prevention in Endpoint Protection Q: Why is SID 29565 not visible in the IPS Exceptions list?Ī: This is a known defect resolved in 14.3 RU3. Traffic has been blocked for this application: URL reputation: Browser navigation to known bad URL attack blocked. Web Attack: Webpulse Bad Reputation Domain Request attack blocked. Q: Can you provide examples of log entries?Ī: The following are examples of possible log entries for each of the detections: Q: Which IPS signatures are used for URL reputation detections?Ī: SID 60501 detections are for browser based detections, and SID 29565 detections are triggered from non-browser sources. The information from visited URLs is sent to Broadcom to retrieve a reputation rating.Ī: URL reputation detections require SymPlatform definitions and IPS definitions downloaded from Symantec LiveUpdate. URL reputation blocks access to the web addresses that are identified as known sources of the malicious content. A: URL reputation detections identify threats from domains and URLs which can host malicious content like malware, fraud, phishing, spam, etc.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |