Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Kosin_Usuwanthi
Collaborator

How to rollback AV signature for fix legitimate site blocked

We found the firewall blocked some URL after signature updated on yesterday.

Now I have exception for DNS traffic then I can access to website as normal.

Firewall blocked e1745.a.akamaiedge.net as Malicious DNS request.

Please advice.

0 Kudos
2 Replies
PhoneBoy
Admin
Admin

False positive should be communicated to the TAC via a support case.

How to submit a False Positive case for Anti-Bot and Anti-Virus protections 

You should be able to create an IOC file with the relevant information and set it to "Inactive" to work around the situation in the meantime.

The CSV might look something like:

observ34,airasia.com,,,AB,
observ35,e1745.a.akamaiedge.net,,,AB,

Then you can set these domains to "Inactive."

See: ATRG: Anti-Bot and Anti-Virus 

0 Kudos
Kosin_Usuwanthi
Collaborator

Thank you Dameon.

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events