Endpoint Protection

Hi Guys,

In our Firewall, we are getting DNS Trap activity in our AntiBot blade. What does that mean? How we can solve the malicious activity using symantec from the system

Hi Srikanth_Subra,

A quick internet search indicates that you're referring to another vendor's security product. Can you clarify what Symantec product you are using and what you're seeing?

 

Many thanks,

 

Mick

Does it show the source of the infection? If so isolate it and run a threat analysis scan and Norton Power eraser. If nothing is found try a few other third party tools. If still nothing, you're best reimaging.

Hi Srikanth_Subra,

Just checking to see if you have any update to this thread?  It is still marked "needs solution."

Many thanks!

Mick

Hi,

we are using symantec endpoint protection.

can you post the logs?

are you referringto the IPS logs?

 

Well you can put in a firewall rule to block the activity but you need to remember that machine and remediate it.