Cisco Cisco ASA 5540 Adaptive Security Appliance Scheda Tecnica
White Paper
© 2009 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information.
Page 11 of 11
Here’s how the corresponding shun command that blocks communication with the same command and control
server would look:
server would look:
shun 209.165.202.129
3. Manually identify ingress/access points of the network (e.g., what switchports infected hosts are plugged into).
Disable the switchport(s) and notify end users that their PCs are infected. Dispatch IT person to perform a
malware/bot cleanup or re-image the infected PC(s) as necessary.
4. Bring the disinfected hosts back online once the threats have been remediated.
Conclusion
The Cisco ASA Botnet Traffic Filter is an effective tool that enterprises can use to gain insights into one of today’s
leading threats. In conjunction with accurate threat data provided by Cisco Security Intelligence Operations and
Cisco Global Correlation for IPS, the Botnet Traffic Filter provides an industry-leading solution to combat modern
botnet threats in a dynamic environment.
Printed in USA
C11-532091-01 06/09