Custom file blocks
Hi,
Is there any way of adding custom file blocks to TDR? Looking at ways to add a list of the most common RYUK files so it will flag them.
thanks
--
WatchGuard M4800 (x2 Cluster)
WatchGuard M690 (x2 Cluster)
Firmware : 12.10.4
0
Sign In to comment.
Comments
TDR can block specific files via MD5sum:
https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/services/tdr/tdr_config_overrides_c.html
-James Carson
WatchGuard Customer Support
Thanks, was hoping for more blanket blocks, like *.evilfile
--
WatchGuard M4800 (x2 Cluster)
WatchGuard M690 (x2 Cluster)
Firmware : 12.10.4