Solved.
adding IPs to Intrusion autoblock
How do I enter IPs to the box in the Intrusion autoblock tab? Recently Norton detected a Malicious Domain Request, but the offending IP address does not show up in the list of blocked addresses.
Replies
Accepted Solution
Re: adding IPs to Intrusion autoblock
Posted: 04-Mar-2022 | 10:13PM · Permalink
IPS auto blocked IP will be auto blocked for a maximum of 48 hours if any malicious network traffic is seen from that machine. In order to block that machine completely, you can go to Firewall->General Settings->Device Trust->Configure->Add. Enter the device IP and choose the Trust Level as Restricted. The same thing can be achieved from the auto block UI if the IP is getting listed in the auto block list. The IP is not listed in the auto block list because the auto block time out period has expired.
This thread is closed from further comment. Please visit the forum to start a new thread.