DNS Reputation Generic.TC.kmcpxf

[KirillEPM]

Good day! Please tell me how can block requests of this kind?
Thanks.

[_Val_]

It is on Detect because confidence level is Low. Go to DNS reputation protection and change action from Detect to Protect. Mind, with confidence Low you will get some false-positives. 

[KirillEPM]

Did I understand correctly that the actions need to be performed here?

[_Val_]

Yes. The action is per profile. DO NOT change the three default profiles, create a new one based on one you are currently using, change there, and then re-apply the new profile to your Security Gateway. 

[Chris_Atkinson]

Under "Forensic Details" what does the expanded Description field say?

[KirillEPM]

it says here:

[Chris_Atkinson]

I think this isn't the correct screenshot, I was referring to the "Log Details" screen above.

[KirillEPM]

[Chris_Atkinson · Accepted solution]

Such a message usually implies that Anti-bot has blocked the communication, you should review the SK referenced and search for log entries with the trap IP to correlate/verify.

In R81 and above we changed the logging action in such instances to indicate traffic was blocked.