cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
512
Views
0
Helpful
1
Replies

Engineer

jerry.shively1
Level 1
Level 1

Does Cisco create Blacklist in WSA and ESA based on threat intelligence? If so how often?  Thanks

1 Reply 1

ESA blocks sender with bad sender IP reputation (ESA creates query for every connection).

WSA blocks web transactions based on bad IP reputation of the web server (WSA receives databases updates periodialy - on evrey 3-5 minutes if I'm not mistaken).

All information is gathered from Cisco SIO: http://www.senderbase.org/