Sourcefire | How to block/avoid scraping

[John]

How can we block/avoid scrapping? is there any category in sourcefire to check?

[David Janulik]

Hi John,

Do you mean web scrapping? AMP works primary with file disposition in the file system. We have built also DFC - device flow correlation, NFM - network file monitor. All depends on the details of user case.

Your question might be related to CTA cognitive threat analysis, which is integration with AMP.

David

[John]

Hello David,

Yes. How can we avoid it? or how can we block from our IPS (Sourcefire)