Results 1 to 4 of 4
  1. #1
    Master Untangler
    Join Date
    Dec 2010
    Location
    Boerne, TX
    Posts
    260

    Default Blocking Ransomware?

    Not sure this is the right forum...

    In reviewing our layered protection, I ran across an article on Untangle's website that mentioned ransomware. The article was:

    https://www.untangle.com/solutions/ransomware/

    One of the bullet points said "Untangle’s NG Firewall can block spam, viruses, and phishing attempts. It can also block “phone home” requests made by malware."

    Here is my question: what needs to be set up in Untangle to block the "phone home" calls made by ransomware to connect to the servers providing the encryption key?
    ...Rick

  2. #2
    Untangler jcoffin's Avatar
    Join Date
    Aug 2008
    Location
    Sunnyvale, CA
    Posts
    6,075

    Default

    The web categories Botnet, Compromised, and Malware Call-Home are set to block by default.
    Attention: Support and help on the Untangle Forums is provided by
    volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  3. #3
    Master Untangler
    Join Date
    Dec 2010
    Location
    Boerne, TX
    Posts
    260

    Default

    Thanks, JCoffin. Would there also be something in the Intrusion Prevention app rules that could cover this as well? My main concern is the AV and website defs are usually quite delayed, where an IP rule might catch the activity.
    ...Rick

  4. #4
    Untangler jcoffin's Avatar
    Join Date
    Aug 2008
    Location
    Sunnyvale, CA
    Posts
    6,075

    Default

    If "Connect to Untangle cloud" is enabled, then our ScoutIQ service will provide quicker response to new threats. https://www.untangle.com/cloud/scout-iq/

    Ransomware uses a social vector so there are only so many holes which can be plugged. In the end, human training to be suspicious of email links and click bait is the best defense.
    Attention: Support and help on the Untangle Forums is provided by
    volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2