cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
568
Views
0
Helpful
0
Replies

ASA 5505 Botnet Traffic Filter

ACadmalmere
Level 1
Level 1

Hello,

We just received the "Botnet Traffic Filter" license for the ASA 5505.

The problem we have is that we cannot create a auto-drop rule.

Step 4

(Optional) To automatically drop malware traffic, perform the following steps.

To manually drop traffic, see the "Blocking Botnet Traffic Manually" section.

a. In the Blacklisted Traffic Actions area, click Add.

The Add Blacklisted Traffic Action dialog box appears.

b. From the Interface drop-down list, choose the interface on which you want to drop traffic. Only interfaces on which you enabled Botnet Traffic Filter traffic classification are available.

c. In the Threat Level area, choose one of the following options to drop traffic specific threat levels. The default level is a range between Moderate and Very High.

The only option under White/Blacklist is manually add IP adresses for White/Blacklist.

There's no other Blacklist section.

How can we drop the Botnet traffic automatically? We don't want to drop it manually.

Kind Regards,

Olaf.                 

0 Replies 0
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card