Configure Botnet Detection
The Botnet Detection subscription service uses a list of known botnet site IP addresses from Reputation Enabled Defense (RED).
To use Botnet Detection, you must have a feature key that enables the RED subscription service. For more information, go to:
When you enable Botnet Detection, traffic to or from these known botnet sites is blocked by the Firebox.
When you enable Botnet Detection, a warning message appears if automatic updates are disabled for the Botnet Detection sites database. To configure automatic updates, go to Configure the Botnet Detection Update Server.
Enable Botnet Detection
- Select Subscription Services > Botnet Detection.
The Botnet Detection page appears.
- Select the Block traffic from suspected botnet sites check box.
- Click Save.
- Select Subscription Services > Botnet Detection.
The Botnet Detection dialog box appears.
- Select the Block traffic from suspected botnet sites check box.
- Click OK.
- Save the configuration to the Firebox.