Infected devices try to contact attackers for instructions. This service blocks those conversations.
The firewall compares destinations with known botnet and command-and-control IP addresses and domains, and blocks matches.
If a device is calling out to an unknown party, administrators want to see it and stop it.
- Cuts off remote control of an infected device.
- Helps stop data from being sent out.
- Alerts you to the device.
- IP and domain reputation.
- Alerts reveal infected hosts.
- Covers devices without agents.
| Control | Priority | How this helps |
|---|---|---|
| SI-4System Monitoring | P1 | Detects infected devices. |
| SC-7Boundary Protection | P1 | Blocks outbound attacker traffic. |
Based on CJIS Security Policy v6.1. This product can support these controls but can’t satisfy them alone. How to read this table