cancel
Showing results for 
Search instead for 
Did you mean: 
Post a Question

How to rollback AV signature for fix legitimate site blocked

We found the firewall blocked some URL after signature updated on yesterday.

Now I have exception for DNS traffic then I can access to website as normal.

Firewall blocked e1745.a.akamaiedge.net as Malicious DNS request.

Please advice.

0 Kudos
2 Replies
Admin
Admin

Re: How to rollback AV signature for fix legitimate site blocked

False positive should be communicated to the TAC via a support case.

How to submit a False Positive case for Anti-Bot and Anti-Virus protections 

You should be able to create an IOC file with the relevant information and set it to "Inactive" to work around the situation in the meantime.

The CSV might look something like:

observ34,airasia.com,,,AB,
observ35,e1745.a.akamaiedge.net,,,AB,

Then you can set these domains to "Inactive."

See: ATRG: Anti-Bot and Anti-Virus 

0 Kudos

Re: How to rollback AV signature for fix legitimate site blocked

Thank you Dameon.

0 Kudos