SonicOS 7.1 Rules and Policies for Policy Mode

Settings > Botnet > Using Botnet Diagnostics
Table of Contents

Using Botnet Diagnostics

The POLICY | Rules and Policies > Settings > Botnet > Diagnostics page provides access to several tools:

  • Botnet Cache Statistics
  • Custom Botnet Statistics
  • Dynamic Botnet Statistics
  • Show Resolved Botnet Locations
  • Check Botnet Server Lookup
  • Incorrectly Marked Address

Botnet Cache Statistics

The Botnet Cache Statistics table contains this information:

  • Location Server IP
  • Resolved Entries
  • Unresolved Entries
  • Current Entry Count
  • Max. Entry Count
  • Botnets Detected

Custom Botnet Statistics

The Diagnostics view displays statistics for both Custom and Dynamic Botnet statistics. Both the Custom Botnet Statistics and Dynamic Botnet Statistics tables display the same information about the number of entries in the list and the number of times lookups have occurred for the entries:

  • No of Entries
  • No of Times Called
  • No of Times Not Looked-up
  • No of Times Resolved

Show Resolved Botnet Locations

When you click on Show Botnets in the Diagnostics section, a table of resolved IP addresses displays with this information:

  • Index
  • IP Address – IP address of the Botnet

Check Botnet Server Lookup

The Botnet Filter also provides the ability to look up IP addresses to determine:

  • Domain name or IP address
  • Country of origin and whether the server is classified as a Botnet server

The Botnet Server Lookup tool can also be accessed from the DEVICE > Diagnostics page.

To look up a Botnet server

  1. Navigate to POLICY | Rules and Policies > Settings > Botnet > Diagnostics.
  2. Scroll to the Check BOTNET Server Lookup section.
  3. In the Lookup IP field, enter the IP address.
  4. Click Go.

Details on the IP address are displayed below the Result heading.

Incorrectly Marked Address

If you believe that a certain address is marked as a Botnet incorrectly, or if you believe an address should be marked as a Botnet, report this issue at SonicWall Botnet IP Status Lookup by either:

  • Clicking on the link in the Note in the POLICY | Rules and Policies > Settings > Botnet > Diagnostics page
  • Going to SonicWall Botnet IP Status Lookup.