777/782
How to Use IP Reputation to Detect Threats
(This feature is only supported on ATP series)
As cyber threats such as scanners, botnets, phishing, etc. grow
increasingly, how to identify suspect IP addresses of threats efficiently
becomes a crucial task.
With regularly updated IP database, ATP prevents threats by blocking
connection to/from known IP addresses based on signature database. It
filters source and destination addresses in your network traffic to take the
proper risk prevention actions.
This example illustrates how to configure IP Reputation on ATP gateway
to detect cyber threats for both incoming and outgoing traffic.
Figure
Note: All network IP addresses and subnet masks are used as examples in this article.
Please replace them with your actual network IP addresses. This example was tested using
the ATP500 (Firmware Version: ZLD 4.35).