Fortinet black logo

Handbook

FortiGuard botnet protection

6.0.0
Copy Link
Copy Doc ID 4afb0436-a998-11e9-81a4-00505692583a:688528
Download PDF

FortiGuard botnet protection

Preventing botnets from controlling your system is achieved by detecting and blocking connection attempts to known botnets. This feature also blocks connections to known phishing sites. The FortiGuard database is continually updated with addresses of known Command and Control (C&C) sites that botnet clients attempt to connect to, as well as a addresses of known phishing URLs.

To enable botnet and phishing protection in a DNS Filter profile, enable Block DNS requests to known botnet C&C.

The latest botnet database is available from FortiGuard. To see the version of the database and display its contents, go to System > FortiGuard > AntiVirus and view the lists for Botnet IPs and Botnet Domains. You can look up more details about Botnet IPs and Domains on the FortiGuard site.

You can block, monitor, or allow outgoing connections to botnet sites for each FortiGate interface.

note icon

The DNS Filter security profile and the botnet protection features are available for both proxy-based and flow-based inspection modes.

FortiGuard botnet protection

Preventing botnets from controlling your system is achieved by detecting and blocking connection attempts to known botnets. This feature also blocks connections to known phishing sites. The FortiGuard database is continually updated with addresses of known Command and Control (C&C) sites that botnet clients attempt to connect to, as well as a addresses of known phishing URLs.

To enable botnet and phishing protection in a DNS Filter profile, enable Block DNS requests to known botnet C&C.

The latest botnet database is available from FortiGuard. To see the version of the database and display its contents, go to System > FortiGuard > AntiVirus and view the lists for Botnet IPs and Botnet Domains. You can look up more details about Botnet IPs and Domains on the FortiGuard site.

You can block, monitor, or allow outgoing connections to botnet sites for each FortiGate interface.

note icon

The DNS Filter security profile and the botnet protection features are available for both proxy-based and flow-based inspection modes.