WSS Admin Guide

Real-Time Botnet Detection

WSS now includes real-time botnet detection. The benefits to the user includes enhanced security, real time detection of machines running zombie malware, as well as identification of botnet command and controls servers on the internet.

Based on information found in traffic patterns between source and destination, and IP addresses that are captured in our log files, we are now able to determine which nodes inside of our customer's networks have been infected and are being used as zombie (infected with malware) as part of a botnet network.

If any zombies are detected within your organization, they display in the dashboard for remediation.

When you click the Click Here link, the Zombie pane displays.

The traffic pattern analysis can also determine which IP addresses outside of our customer networks are acting as command and control servers for the botnet network and should be blocked.

That data can then be used to enhance our threat intelligence network and in real time.