13
©
SOLIDA SYSTEMS INTERNATIONAL
2016
The most recent events for the past hour and the past 6 hours are shown separately to give a
clearer overview of the current status. Critical events require immediate user intervention and are
therefore marked clearly as critical for easy identification.
4.4 Reputation Threat List Updates
The Solida appliances obtain their threat information by downloading proprietary threat list from
a cloud-based server. There are three categories of lists. They are domain reputation blacklist, IP
reputation blacklist and Tor exit node list. The factory default is to allow for all these lists to be
included in the cloud updates. Changing this factory default should only be done in very special
cases. Disabling a list results in the possibility of malicious packets being able to penetrate the
network and cause escalating damage.
To change the factory default setting, start the configuration utility and navigate to
“Configuration”. Locate the block titled “Reputation Threat List Updates”. It will look as shown in
the picture below.
Figure 4.6 Reputation threat list updates window
The following settings are available:
Domain Reputation Blacklist
-
Enabled – update once per hour (default)
-
Disabled
IP Reputation Blacklist
-
Enabled – update once per hour (default)
-
Disabled
Tor Exit Nodes
-
Enabled – update once per hour (default)
