Cisco ASA 5505 Configuration Manual page 1086

Configuring the Botnet Traffic Filter
b.
c.
d.
e.
The Fetch Botnet Database button is for testing purposes only; it downloads and verifies the dynamic
Note
database, but does not store it in running memory.
For information about the Search Dynamic Database area, see the
section on page
What to Do Next
See the
Adding Entries to the Static Database
The static database lets you augment the dynamic database with domain names or IP addresses that you
want to blacklist or whitelist. Static blacklist entries are always designated with a Very High threat level.
See the
Prerequisites
•
•
Detailed Steps
Choose the Configuration > Firewall > Botnet Traffic Filter > Black or White List pane, click Add
Step 1
for the Whitelist or Blacklist.
The Enter hostname or IP Address dialog box appears.
In the Addresses field, enter one or more domain names, IP addresses, and IP address/netmasks.
Step 2
Enter multiple entries separated by commas, spaces, lines, or semi-colons. You can enter up to 1000
entries for each type.
Click OK.
Step 3
Click Apply.
Step 4
Cisco ASA 5500 Series Configuration Guide using ASDM
50-8
Click Apply.
Click Purge Botnet Database.
To redownload the database, re-check the Use Botnet data dynamically downloaded from
updater server check box.
Click Apply.
50-13.
"Adding Entries to the Static Database" section on page
"Information About the Static Database" section on page 50-3
In multiple context mode, perform this procedure in the context execution space.
Enable adaptive security appliance use of a DNS server in the Device Management > DNS > DNS
Client > DNS Lookup area. In multiple context mode, enable DNS per context.
Chapter 50 Configuring the Botnet Traffic Filter
"Searching the Dynamic Database"
50-8.
for more information.
OL-20339-01