50-8
Cisco ASA 5500 Series Configuration Guide using ASDM
OL-20339-01
Chapter 50 Configuring the Botnet Traffic Filter
Configuring the Botnet Traffic Filter
b. Click Apply.
c. Click Purge Botnet Database.
d. To redownload the database, re-check the Use Botnet data dynamically downloaded from
updater server check box.
e. Click Apply.
Note The Fetch Botnet Database button is for testing purposes only; it downloads and verifies the dynamic
database, but does not store it in running memory.
For information about the Search Dynamic Database area, see the “Searching the Dynamic Database”
section on page 50-13.
What to Do Next
See the “Adding Entries to the Static Database” section on page 50-8.
Adding Entries to the Static Database
The static database lets you augment the dynamic database with domain names or IP addresses that you
want to blacklist or whitelist. Static blacklist entries are always designated with a Very High threat level.
See the “Information About the Static Database” section on page 50-3 for more information.
Prerequisites
• In multiple context mode, perform this procedure in the context execution space.
• Enable adaptive security appliance use of a DNS server in the Device Management > DNS > DNS
Client > DNS Lookup area. In multiple context mode, enable DNS per context.
Detailed Steps
Step 1 Choose the Configuration > Firewall > Botnet Traffic Filter > Black or White List pane, click Add
for the Whitelist or Blacklist.
The Enter hostname or IP Address dialog box appears.
Step 2 In the Addresses field, enter one or more domain names, IP addresses, and IP address/netmasks.
Enter multiple entries separated by commas, spaces, lines, or semi-colons. You can enter up to 1000
entries for each type.
Step 3 Click OK.
Step 4 Click Apply.
To Next Page
Loading...
Need help?
General
