Check Point HARMONY R81 - Anti-Bot Protection Mode

Anti-Bot Protection Mode
R81 Harmony Endpoint Server Administration Guide|336
Anti-Bot Protection Mode
By default, the Anti-Bot Default protection mode allows connections while it checks for bots in
the background. You can choose to block connections until the threat check is complete.
To configure General Settings:
1. In the Properties of the General Settings Action, select an option from the Select action
drop-down menu.
To create a new action profile, click New, and in the window that opens enter the name
and the description.
2. Click OK.
3. Select the default behavior:
n
Background - connections are allowed until threat check is complete
n
Hold - connections are blocked until threat check is complete
4. Hours to suppress logs for same bot protection -To minimize the size of the Anti-Bot
logs, actions for the same bot are only logged one time per hour. To change the default
log interval , select a number of hours.
5. Days to remove bot reporting after -If a bot does not connect to its command and
control server after the selected number of days, the client stops reporting that it is
infected.
6. Click OK.