How do you block it in real time and verify it is successfully blocked?

You find a suspicious FTP site trying to connect to one of your internal hosts. How do you block it
in real time and verify it is successfully blocked? Highlight the suspicious connection in SmartView
Tracker:

You find a suspicious FTP site trying to connect to one of your internal hosts. How do you block it
in real time and verify it is successfully blocked? Highlight the suspicious connection in SmartView
Tracker:

A.
Log mode. Block it using Tools > Block Intruder menu. Observe in the Log mode that the
suspicious connection does not appear again in this SmartView Tracker view.
B. Log mode. Block it using Tools > Block Intruder menu. Observe in the Log mode that the
suspicious connection is listed in this SmartView Tracker view as “dropped?.

C.
Active mode. Block it using Tools > Block Intruder menu. Observe in the Active mode that the
suspicious connection does not appear again in this SmartView Tracker view.

D.
Active mode. Block it using Tools > Block Intruder menu. Observe in the Active mode that the
suspicious connection is listed in this SmartView Tracker view as “dropped?.



Leave a Reply 3

Your email address will not be published. Required fields are marked *