ThreatSTOP 4.06 release includes:

  • Reporting updates
  • Policy update

Reporting:

  • The DNS Firewall Report Client IP Summary can now be sorted by number of blocks, as well as numerically by IP address. This enhancement makes it easier for users to identify the client IPs responsible for the largest volume of blocks to aid in remediation of infected host machines.
  • The IP Firewall reports related to Traffic Summary can also be sorted by blocks as well as numerically by IP address as part of this enhancement.

Policy:

  • New targets have been introduced to further protect from ransomware attacks. The new targets include protection against the TeslaCrypt, CryptoWall, TorrentLocker, and Locky variants. For more information on new targets, check out the blog.