cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
272
Views
0
Helpful
2
Replies

Double Detected Signatures

community
Level 1
Level 1

I have an internel and an external sensor. Both sensors are picking up Netsky virus activity from the same external address. My outside sensor is setup to shun those addresses. Should't that prevent any signatures from passing through the firewall?

2 Replies 2

mcvosi
Level 1
Level 1

You can opt to block the offending source IP address completely.

I tend to do this when I see obscene amounts of virus-related traffic from one particular source, over all other infected sources. And when the admin of that network complains about not being able to e-mail us, I suggest to he/she that they should pay closer attention to what occurs on their network.