Quantum SPARK 1500 - Anti-Bot

Advanced Threat Prevention Engine Settings
R81.10.X Quantum Spark 1500, 1600, 1800, 1900, 2000 Appliances Locally Managed Administration Guide|292
n
Viruses - Real-time protection from the latest malware and viruses by examining
each file against the Check Point ThreatCloud database.
To enable Detect-only mode:
Select the checkbox.
Anti-Bot
You can set policy overrides to override the general policy settings defined on the Threat
Prevention Blade Control page. For each of the below protection type options, you can set the
applicable override action: Ask, Prevent, Detect, Inactive, or According to policy (no override).
See the Threat Prevention > Threat Prevention Blade Control page for a description of the
action types.
n
Malicious activity - Protections related to unique communication patterns of botnet and
malware specified families.
n
Reputation domains - Protections related to Command & Control (C&C) servers. Each
host is checked against the Check Point ThreatCloud reputation database.
n
Reputation IPs - Protections related to Command & Control (C&C) servers. Each IP is
checked against the Check Point ThreatCloud reputation database.
n
Reputation URLs - Protections related to Command & Control (C&C) servers. Each URL
is checked against the Check Point ThreatCloud reputation database.
n
Unusual activity - Protections related to the behavioral patterns common to botnet and
malware activity.
To enable Detect-only mode:
Select the checkbox.