Filter:

Submit Search

IMPORTANT
SNS 3.x versions have reached End of Maintenance since July 1st, 2024.
We recommend that you update your SNS firewalls to a version with maintenance to guarantee the protection of your infrastructure.

# Configuration tab

This tab makes it possible to enable host reputation management and define the respective weight of the various criteria involved in the calculation of a reputation.

## General

| This button makes it possible to enable or disable host reputation management.

### Alarm risk

Major [0-20] | Adjust the slider in order to define the weight of major alarms raised by a host in the calculation of its reputation.
Minor [0-20] | Adjust the slider in order to define the weight of minor alarms raised by a host in the calculation of its reputation.

### Antivirus risk

Infected [0-100] | Adjust the slider in order to define the weight of infected files detected for a host in the calculation of this host's reputation.
Unknown [0-20] | Adjust the slider in order to define the weight of files that could not be scanned (encrypted files, password-protected files, etc).
Scan failed [0-20] | Adjust the slider in order to define the weight of files for which the antivirus scan failed during the calculation of a host's reputation (corrupted file, corrupted antivirus base, etc.).

### Sandboxing risk

Malicious [0-100] | Adjust the slider in order to define the weight of malicious files detected for a host in the calculation of this host's reputation.
Suspicious [0-100] | Adjust the slider in order to define the weight of suspicious files detected for a host in the calculation of this host's reputation.
Scan failed [0-20] | Adjust the slider in order to define the weight of files for which sandboxing failed during the calculation of a host's reputation (e.g.: corrupted files).

### Statistics

Reset reputation scores for all hosts in the database | Clicking on this button will erase the reputation scores of all hosts contained in the reputation database. The scores of all these hosts will then be reset to zero, and will change according to the settings selected in the Alarms, Antivirus and Sandboxing categories. If "block" filter rules are applied based on reputation scores, hosts will only be blocked after their scores have increased.