AnsweredAssumed Answered

Anti-Virus log prompt: "background classification mode was set"

Question asked by 56aea48b-b5d0-442c-bce7-6bf75bbc04f5 on Feb 12, 2019
Latest reply on Feb 13, 2019 by 56aea48b-b5d0-442c-bce7-6bf75bbc04f5

Dear 

FW:23500     Version:R80.10       Hotfix:R80_10_JUMBO_HF_Bundle_T56_sk11638

I have set hold mode,refer to screenshots below:

TP configuration as follow:

But the log shows as follow:

Description:

                  Connection was allowed because background classification mode was set. See sk74120 for more information.

"loop.sawmilliner.com" is a C2 and malware site,as follow:

 

 

I have set classification mode to hold,why still show "background classification mode was set"

Thanks!

Outcomes