Collapse & Return to Top
Botnets are an increasing source of concern for businesses. They are extremely difficult to detect, can propagate and mutate quickly, and pose numerous security risks, from data leakage to denial-of-service attacks. The Cisco ASA 5500 Series Botnet Traffic Filter is a new feature available with the Cisco ASA 8.2 Software Release for botnet traffic detection. The Botnet Traffic Filter monitors network ports across all ports and protocols for rogue activity, and detects infected internal endpoints or bots sending command and control traffic back to a host on the Internet. The command and control hosts receiving the information are accurately identified using the Botnet Traffic Filter database. With updates from Cisco Security Intelligence Operations, this feature can provide fast and accurate protection against botnet threats. A license is required to enable this feature on the Cisco ASA 5500 Series.